Description

Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

Remediation

References

CVE-2012-6073

Related Vulnerabilities

MySQL CVE-2017-3291 Vulnerability (CVE-2017-3291)

Apache Tomcat Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2018-8037)

Grafana Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-41174)

WordPress Plugin PS PHPCaptcha WP Denial of Service (1.1.0)

Django Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2513)

Severity

Medium

Classification

CVE-2012-6073 CWE-20

Tags

Missing Update Known Vulnerabilities