GHSA-j7r7-7qmf-xq87HighCVSS 7.5

Jenkins SAML Plugin does not implement a replay cache

Published
October 29, 2025
Last Modified
November 5, 2025

🔗 CVE IDs covered (1)

CVE-2025-64131 →

📋 Description

Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache.

This allows attackers able to obtain information about the SAML authentication flow between a user’s web browser and Jenkins to replay those requests, authenticating to Jenkins as that user.

SAML Plugin 4.583.585.v22ccc1139f55 implements a replay cache that rejects replayed requests.

🎯 Affected products1

  • maven/org.jenkins-ci.plugins:saml:< 4.583.585.v22ccc1139f55

🔗 References (5)