CVE-2025-27625
In Jenkins 2.499 and earlier, LTS 2.492.1 and earlier, redirects starting with backslash (`\`) characters are considered safe, allowing attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site, because browsers interpret these characters as part of scheme-relative redirects.
Vendor
Product
CWE
Yayın Tarihi
2025-03-05 23:15:14
Güncelleme
2025-06-24 00:42:16
Source Identifier
jenkinsci-cert@googlegroups.com
KEV Date Added
-