Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

io.jenkins.plugins:miniorange-saml-sp

7 known vulnerabilities (3 high, 2 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
7 · 3 high, 2 medium, 1 low
Registry
Maven Central

Advisories 7

  • A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with…

    Affected: fixed in 2.3.1.

  • CVE-2023-32996Medium 4.3

    A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers with Overall/Read permission to…

    Affected: fixed in 2.0.1.

  • A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers to send an…

    Affected: fixed in 2.0.1.

  • Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 and earlier unconditionally disables SSL/TLS certificate validation for connections to…

    Affected: fixed in 2.2.0.

  • CVE-2023-32993Medium 4.8

    Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the…

    Affected: fixed in 2.1.0.

  • Missing permission checks in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allow attackers with Overall/Read permission to…

    Affected: fixed in 2.1.0.

  • A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allows attackers to send an…

    Affected: fixed in 2.1.0.