CVE-2018-1000174: URL Redirection to Untrusted Site (Open Redirect)

May 8, 2018 (updated June 13, 2018)

An open redirect vulnerability exists in the Jenkins Google Login Plugin that allows attackers to redirect users to an arbitrary URL after successful login.

References

www.securityfocus.com/bid/104211
jenkins.io/security/advisory/2018-04-16/
nvd.nist.gov/vuln/detail/CVE-2018-1000174

Detect and mitigate CVE-2018-1000174 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →