JO
Product
Jenkins OpenId Connect Authentication Plugin
by Jenkins project · last CVE Jan 22, 2025
2
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 1Low 0
Watch

Add Jenkins OpenId Connect Authentication Plugin to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-24399
8.8
1%
Jan 22
Jenkins OpenId Connect Authentication Plugin 4.452.v2849b_d3945fa_ and earlier, except 4.438.440.v3f5f201de5dc, treats usernames as case-insensitive, allowing attackers on Jenkins…
Affected: All versions, or not specified
Showing 1