org.jenkins-ci.plugins:azure-ad
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| Jenkins Microsoft Entra ID (previously Azure AD) Plugin has an open redirect vulnerability | org.jenkins-ci.plugins:azure-ad | Maven | Medium | Fix reported | |
| Jenkins Azure AD Plugin allows bypassing CSRF protection for any URL | org.jenkins-ci.plugins:azure-ad | Maven | High | Fix reported | |
| Non-constant time nonce comparison in Jenkins Microsoft Entra ID (previously Azure AD) Plugin | org.jenkins-ci.plugins:azure-ad | Maven | High | Fix reported | |
| Jenkins Azure AD Plugin stored the client secret unencrypted | org.jenkins-ci.plugins:azure-ad | Maven | Low | Fix reported | |
| Client secret transmitted in plain text by Azure AD Plugin | org.jenkins-ci.plugins:azure-ad | Maven | Low | Fix reported | |
| Insufficient Session Expiration in Jenkins Azure AD Plugin | org.jenkins-ci.plugins:azure-ad | Maven | High | No fix reported |