Executive Summary

This vulnerability exists in Jenkins versions 2.567 and earlier, including LTS 2.555.2 and earlier. It occurs because Jenkins does not ensure that the "from" parameter in the "Delegate to servlet container" security realm is safe to redirect to after login.

As a result, attackers can exploit this flaw to perform phishing attacks by redirecting users to a domain controlled by the attacker after they log in.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by enabling attackers to redirect authenticated users to malicious websites after login.

Such redirection can be used for phishing attacks, potentially leading to credential theft, malware installation, or other malicious activities.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should upgrade Jenkins to version 2.568 or later, or LTS 2.555.3 or later.

These versions include a fix that strips tab and newline characters before validation and rejects URLs containing // anywhere, preventing the open redirect issue.

Useful 0 Not Useful 0