CVE-2026-42525

Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.jenkins.io/security/advisory/2026-04-29/#SECURITY-3760	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:jenkins:azure_ad:*:*:*:*:*:jenkins:*:*

History

26 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Jenkins Microsoft Entra ID (anteriormente Azure AD) Plugin 666.v6060de32f87d y anteriores no restringe la URL de redirección después de iniciar sesión, permitiendo a los atacantes realizar ataques de phishing.

Information

Published : 2026-04-29 14:16

Updated : 2026-10-26 20:10

NVD link : CVE-2026-42525

Mitre link : CVE-2026-42525

CVE.ORG link : CVE-2026-42525

JSON object : View

Products Affected

jenkins

azure_ad

CWE

CWE-601

URL Redirection to Untrusted Site ('Open Redirect')

{"id": "CVE-2026-42525", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-42525", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-29T14:09:36.527106Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "jenkinsci-cert@googlegroups.com", "affectedData": [{"vendor": "Jenkins Project", "product": "Jenkins Microsoft Entra ID (previously Azure AD) Plugin", "versions": [{"status": "affected", "version": "0", "versionType": "maven", "lessThanOrEqual": "666.v6060de32f87d"}], "defaultStatus": "unaffected"}]}], "published": "2026-04-29T14:16:19.557", "references": [{"url": "https://www.jenkins.io/security/advisory/2026-04-29/#SECURITY-3760", "tags": ["Vendor Advisory"], "source": "jenkinsci-cert@googlegroups.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-601"}]}], "descriptions": [{"lang": "en", "value": "Jenkins Microsoft Entra ID (previously Azure AD) Plugin 666.v6060de32f87d and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks."}, {"lang": "es", "value": "Jenkins Microsoft Entra ID (anteriormente Azure AD) Plugin 666.v6060de32f87d y anteriores no restringe la URL de redirecci\u00f3n despu\u00e9s de iniciar sesi\u00f3n, permitiendo a los atacantes realizar ataques de phishing."}], "lastModified": "2026-10-26T20:10:00.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jenkins:azure_ad:*:*:*:*:*:jenkins:*:*", "vulnerable": true, "matchCriteriaId": "E9C13250-934D-47A2-B273-F7F5D604507D", "versionEndIncluding": "666.v6060de32f87d"}], "operator": "OR"}]}], "sourceIdentifier": "jenkinsci-cert@googlegroups.com"}