- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 5 · 1 critical, 4 medium
- Registry
- Maven Central
Advisories 5
- CVE-2025-47889Critical 9.8
In Jenkins WSO2 Oauth Plugin 1.0 and earlier, authentication claims are accepted without validation by the "WSO2 Oauth" security realm…
Affected: through 1.0.
- CVE-2023-33006Medium 5.4
A cross-site request forgery (CSRF) vulnerability in Jenkins WSO2 Oauth Plugin 1.0 and earlier allows attackers to trick users into…
Affected: through 1.0.
- CVE-2023-33005Medium 5.4
Jenkins WSO2 Oauth Plugin 1.0 and earlier does not invalidate the previous session on login.
Affected: through 1.0.
- CVE-2023-30528Medium 6.5
Jenkins WSO2 Oauth Plugin 1.0 and earlier does not mask the WSO2 Oauth client secret on the global configuration form, increasing the…
Affected: through 1.0.
- CVE-2023-30527Medium 4.3
Jenkins WSO2 Oauth Plugin 1.0 and earlier stores the WSO2 Oauth client secret unencrypted in the global config.xml file on the Jenkins…
Affected: through 1.0.