CVE-2018-1000174

Severity: medium (CVSS 6.1 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-05-08 · updated 2026-06-17
Weakness: CWE-601

Description

An open redirect vulnerability exists in Jenkins Google Login Plugin 1.3 and older in GoogleOAuth2SecurityRealm.java that allows attackers to redirect users to an arbitrary URL after successful login.

Affected products

Jenkins Project Jenkins Google Login Plugin: through 1.3

References

http://www.securityfocus.com/bid/104211
https://jenkins.io/security/advisory/2018-04-16/
http://www.securityfocus.com/bid/104211
https://jenkins.io/security/advisory/2018-04-16/

Get alerted when CVE-2018-1000174 or the next vulnerability affects your stack