CVE-2012-6073: Jenkins affected by Open Redirect Vulnerability

May 14, 2022 (updated March 13, 2025)

Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

References

bugzilla.redhat.com/show_bug.cgi?id=890608
github.com/advisories/GHSA-mqgf-4rw4-2cq2
github.com/jenkinsci/jenkins
nvd.nist.gov/vuln/detail/CVE-2012-6073
wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2012-11-20

Detect and mitigate CVE-2012-6073 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →