CVE-2025-27625 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

In Jenkins 2.499 and earlier, LTS 2.492.1 and earlier, redirects starting with backslash (`\`) characters are considered safe, allowing attackers to perform phi…
Medium CVSS: 4.3

CVE-2025-27625

In Jenkins 2.499 and earlier, LTS 2.492.1 and earlier, redirects starting with backslash (`\`) characters are considered safe, allowing attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site, because browsers interpret these characters as part of scheme-relative redirects.
Vendor
Jenkins
Product
Jenkins
CWE
CWE-601
Yayın Tarihi
2025-03-05 23:15:14
Güncelleme
2025-06-24 00:42:16
Source Identifier
jenkinsci-cert@googlegroups.com
KEV Date Added
-

Kategoriler

Referanslar