| Package | Affected versions | Patched versions |
|---|---|---|
| org.jenkins-ci.plugins:google-login | < 1.3.1 | 1.3.1 |
| google login | ≤ 1.3 |
An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login. Google Login Plugin 1.3.1 only performs redirects to relative URLs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free