Jenkins Openid vulnerabilities

• jenkins openid connect provider, jenkins project openid connect provider plugin +1 more Jenkins OpenID Connect Provider Plugin Incorrectly Validates Crafted Build ID Tokens CVE-2025-47884 Fix available 9.1 CriticalMay 14, 2025
• jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 more Improper handling of case sensitivity in Jenkins OpenId Connect Authentication Plugin CVE-2025-24399 Fix available 8.8 HighJanuary 22, 2025
• jenkins openid, openid connect authentication, jenkins project openid connect authentication plugin +2 more Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin CVE-2024-52553 Fix available 8.8 HighNovember 13, 2024
• jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 more Jenkins OpenId Connect Authentication Plugin lacks issuer claim validation CVE-2024-47807 Fix available 8.1 HighOctober 2, 2024
• jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 more Jenkins OpenId Connect Authentication Plugin lacks audience claim validation CVE-2024-47806 Fix available 8.1 HighOctober 2, 2024
• jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 more Open redirect vulnerability in Jenkins OpenId Connect Authentication Plugin CVE-2023-50771 Fix available 6.1 MediumDecember 13, 2023
• jenkins openid, jenkins project openid connect authentication plugin +1 more Password stored in a recoverable format by Jenkins OpenId Connect Authentication Plugin CVE-2023-50770 Fix available 6.7 MediumDecember 13, 2023
• jenkins openid, jenkins project openid plugin +1 more Cross-site request forgery vulnerability in Jenkins OpenID Plugin CVE-2023-24446 8.8 HighJanuary 24, 2023
• jenkins openid, jenkins project openid plugin +1 more Open redirect vulnerability in Jenkins OpenID Plugin CVE-2023-24445 6.1 MediumJanuary 24, 2023
• jenkins openid, jenkins project openid plugin +1 more Session fixation vulnerability in Jenkins OpenID Plugin CVE-2023-24444 9.8 CriticalJanuary 24, 2023
• jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 more Session fixation vulnerability in Jenkins OpenId Connect Authentication Plugin CVE-2023-24424 Fix available 8.8 HighJanuary 24, 2023
• jenkins openid, jenkins project openid plugin +1 more Jenkins openid Plugin missing permission check CVE-2019-1003099 Fix available 6.5 MediumApril 4, 2019
• jenkins openid, jenkins project openid plugin +1 more Jenkins OpenID Plugin CSRF vulnerability CVE-2019-1003098 Fix available 6.5 MediumApril 4, 2019
• jenkins openid connect authentication, jenkins project openid connect authentication plugin +1 more Jenkins OpenId Connect Authentication Plugin showed plain text client secret in configuration form CVE-2019-1003021 Fix available 4.3 MediumFebruary 6, 2019