CVE-2022-25196

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Jenkins GitLab Authentication Plugin 1.13 and earlier records the HTTP Referer header as part of the URL query parameters when the authentication process starts, allowing attackers with access to Jenkins to craft a URL that will redirect users to an attacker-specified URL after logging in.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-601

Affected software

Vendor	Product	Versions
Jenkins project	Jenkins GitLab Authentication Plugin	>= unspecified, <= 1.13

References

http://www.openwall.com/lists/oss-security/2022/02/15/2Mailing List, Third Party Advisory
https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-1833Issue Tracking, Patch, Vendor Advisory
http://www.openwall.com/lists/oss-security/2022/02/15/2Mailing List, Third Party Advisory
https://www.jenkins.io/security/advisory/2022-02-15/#SECURITY-1833Issue Tracking, Patch, Vendor Advisory

Timeline

Published: Feb 15, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-251976.5Jenkins HashiCorp Vault Plugin 336.v182c0fbaaeb7 and earlier implements functionality that allows agent processes to read arbitrary files on CVE-2022-251988.8A cross-site request forgery (CSRF) vulnerability in Jenkins SCP publisher Plugin 1.8 and earlier allows attackers to connect to an attacker CVE-2022-251998.8A missing permission check in Jenkins SCP publisher Plugin 1.8 and earlier allows attackers with Overall/Read permission to connect to an at CVE-2022-25206.5A flaw was found in libtiff 4.4.0rc1. There is a sysmalloc assertion fail in rotateImage() at tiffcrop.c:8621 that can cause program crash w CVE-2022-252008.8A cross-site request forgery (CSRF) vulnerability in Jenkins Checkmarx Plugin 2022.1.2 and earlier allows attackers to connect to an attacke CVE-2022-252016.5Missing permission checks in Jenkins Checkmarx Plugin 2022.1.2 and earlier allow attackers with Overall/Read permission to connect to an att CVE-2022-252024.8Jenkins Promoted Builds (Simple) Plugin 1.9 and earlier does not escape the name of custom promotion levels, resulting in a stored cross-sit CVE-2022-252035.4Jenkins Team Views Plugin 0.9.0 and earlier does not escape team names, resulting in a stored cross-site scripting (XSS) vulnerability explo CVE-2022-252045.4Jenkins Doktor Plugin 0.4.1 and earlier implements functionality that allows agent processes to render files on the controller as Markdown o CVE-2022-252058.8A cross-site request forgery (CSRF) vulnerability in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers to connect to an attacker-sp CVE-2022-252068.8A missing check in Jenkins dbCharts Plugin 0.5.2 and earlier allows attackers with Overall/Read permission to connect to an attacker-specifi CVE-2022-252078.8A cross-site request forgery (CSRF) vulnerability in Jenkins Chef Sinatra Plugin 1.20 and earlier allows attackers to have Jenkins send an H