Total vulnerabilities in the database
Jenkins OpenId Connect Authentication Plugin 4.354.v321ce67a_1de8 and earlier does not check the iss (Issuer) claim of an ID Token, allowing attackers to subvert the authentication flow, potentially gaining administrator access to Jenkins.
| Software | From | Fixed in |
|---|---|---|
| jenkins / openid_connect_authentication | - | 4.355.v3a_fb_fca_b_96d4 |