Beveiligingsadvies

CVE-2026-53436

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-06-10 13:05:57
Laatst bijgewerkt 2026-06-10 15:36:40
Toegewezen door jenkins
CVSS-score 4.3
Status PUBLISHED

Beschrijving

Jenkins 2.567 and earlier, LTS 2.555.2 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins when it contains relative path segments (`./` or `../`), allowing attackers to perform phishing attacks.