https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:31:43 +0000 https://cve.radiocsirt.org/vuln/cnvd-2019-28235 cnvd-2019-28235 https://cve.radiocsirt.org/vuln/cnvd-2019-28235 https://cve.radiocsirt.org/vuln/euvd-2026-53623 EUVD-2026-53623 https://cve.radiocsirt.org/vuln/euvd-2026-53623 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10372 <p>An open redirect vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows attackers to redirect users to a URL outside Jenkins after successful login.</p> <p>An open redirect vulnerability in Jenkins Gitlab Authentication Plugin 1.4 and earlier in GitLabSecurityRealm.java allows attackers to redirect users to a URL outside Jenkins after successful login.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-10372 https://cve.radiocsirt.org/vuln/ghsa-pg59-2w33-8vmc <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:gitlab-oauth</p> <p>GitLab Authentication Plugin records the HTTP `Referer` header when the authentication process starts and redirects users to that URL when the user has finished logging in.</p> <p>This implements an open redirect, allowing malicious sites to implement a phishing attack, with users expecting they have just logged in to Jenkins.</p> <p><strong>Affected:</strong> Maven: org.jenkins-ci.plugins:gitlab-oauth</p> <p>GitLab Authentication Plugin records the HTTP `Referer` header when the authentication process starts and redirects users to that URL when the user has finished logging in.</p> <p>This implements an open redirect, allowing malicious sites to implement a phishing attack, with users expecting they have just logged in to Jenkins.</p> https://cve.radiocsirt.org/vuln/ghsa-pg59-2w33-8vmc https://cve.radiocsirt.org/vuln/gsd-2019-10372 gsd-2019-10372 https://cve.radiocsirt.org/vuln/gsd-2019-10372