Security Advisory

CVE-2021-21673

6.1
MEDIUM

Vulnerability Description

Jenkins CAS Plugin 1.6.0 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.
Published Date June 30, 2021
Official Source NIST NVD Advisory