https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T08:01:11.333934+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2022-16712 cnvd-2022-16712 2026-10-03T08:01:11.404234+00:00 cnvd-2022-16712 https://cve.radiocsirt.org/vuln/euvd-2026-14410 EUVD-2026-14410 2026-10-03T08:01:11.404273+00:00 EUVD-2026-14410 https://cve.radiocsirt.org/vuln/fkie_cve-2022-25196 fkie_cve-2022-25196 2026-10-03T08:01:11.404287+00:00

Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query parameters when the authentication process starts, allowing attackers with access to Jenkins to craft a URL that will redirect users to an attacker-specified URL after logging in.

 https://cve.radiocsirt.org/vuln/ghsa-mvq8-hgxh-4v2g GHSA-mvq8-hgxh-4v2g — Open redirect vulnerability in Jenkins GitLab Authentication Plugin 2026-10-03T08:01:11.404316+00:00

Affected: Maven: org.jenkins-ci.plugins:gitlab-oauth

Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP `Referer` header as part of the URL query parameters when the authentication process starts, allowing attackers with access to Jenkins to craft a URL that will redirect users to an attacker-specified URL after logging in.

This issue is caused by an incomplete fix of [SECURITY-796](https://www.jenkins.io/security/advisory/2019-08-07/#SECURITY-796).

 https://cve.radiocsirt.org/vuln/gsd-2022-25196 gsd-2022-25196 2026-10-03T08:01:11.404342+00:00 gsd-2022-25196