What is GHSA-mqgf-4rw4-2cq2?

GHSA-mqgf-4rw4-2cq2 is a security advisory published by GitHub Security Advisories with Low severity. Jenkins affected by Open Redirect Vulnerability

Which CVE IDs does GHSA-mqgf-4rw4-2cq2 cover?

GHSA-mqgf-4rw4-2cq2 covers the following CVE IDs: CVE-2012-6073. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by GHSA-mqgf-4rw4-2cq2?

GHSA-mqgf-4rw4-2cq2 affects 2 products, including: maven/org.jenkins-ci.main:jenkins-core:\u003c 1.480.1; maven/org.jenkins-ci.main:jenkins-core:\u003e= 1.481, \u003c 1.491.

GHSA-mqgf-4rw4-2cq2Low

Jenkins affected by Open Redirect Vulnerability

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

March 13, 2025

🔗 CVE IDs covered (1)

CVE-2012-6073 →

📋 Description

Open redirect vulnerability in Jenkins before 1.491, Jenkins LTS before 1.480.1, and Jenkins Enterprise 1.424.x before 1.424.6.13, 1.447.x before 1.447.4.1, and 1.466.x before 1.466.10.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors.

🎯 Affected products2

maven/org.jenkins-ci.main:jenkins-core:< 1.480.1
maven/org.jenkins-ci.main:jenkins-core:>= 1.481, < 1.491

🔗 References (7)

https://nvd.nist.gov/vuln/detail/CVE-2012-6073
https://bugzilla.redhat.com/show_bug.cgi?id=890608
https://wiki.jenkins-ci.org/display/SECURITY/Jenkins+Security+Advisory+2012-11-20
http://rhn.redhat.com/errata/RHSA-2013-0220.html
http://www.cloudbees.com/jenkins-advisory/jenkins-security-advisory-2012-11-20.cb
http://www.openwall.com/lists/oss-security/2012/12/28/1
https://github.com/advisories/GHSA-mqgf-4rw4-2cq2