Maven/org.jenkins-ci.plugins:openid CVE-2019-1003098: medium 6.5, EPSS 1.31%

Jenkins OpenID Plugin CSRF vulnerability

Action: Upgrade org.jenkins-ci.plugins:openid to 2.4 or later.

Affected

Fixed versions

Sources

• osv: GHSA-8v26-3p83-mf2g
• https://nvd.nist.gov/vuln/detail/CVE-2019-1003098
• https://github.com/jenkinsci/openid-plugin/commit/5a91a74a94e44d87cd61afc2441aab42b7542bf0
• https://github.com/jenkinsci/openid-plugin
• https://jenkins.io/security/advisory/2019-04-03/#SECURITY-1084
• http://www.openwall.com/lists/oss-security/2019/04/12/2
• http://www.securityfocus.com/bid/107790

CVE-2019-1003098 · published 2022-05-13T01:25:41Z · modified 2024-02-16T08:23:13.347236Z · JSON