Multiple open redirect vulnerabilities in Jenkins before 2.3 and LTS before 1.651.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors related to "scheme-relative" URLs.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Freebsd | — | Upgrade jenkins2Upgrade jenkins-ltsUpgrade jenkins | Dec 10, 2025 | May 12, 2016 |
| Jenkins 2016 05 11 | — | Upgrade Jenkins to version 2.3Upgrade Jenkins LTS to version 1.651.2Upgrade Jenkins LTS to the latest versionUpgrade Jenkins to the latest version | Nov 13, 2017 | May 17, 2016 |
| Redhat Openshift | — | Upgrade openshift-origin-cartridge-haproxyUpgrade rubygem-openshift-origin-controllerUpgrade rubygem-openshift-origin-routing-daemonUpgrade rubygem-openshift-origin-msg-broker-mcollectiveUpgrade openshift-origin-broker-utilUpgrade openshift-origin-node-proxyUpgrade openshift-origin-cartridge-diyUpgrade openshift-origin-msg-node-mcollectiveUpgrade jenkinsUpgrade openshift-origin-cartridge-nodejsUpgrade openshift-origin-cartridge-rubyUpgrade openshift-origin-cartridge-perlUpgrade openshift-origin-cartridge-mongodbUpgrade activemqUpgrade rubygem-openshift-origin-nodeUpgrade openshift-origin-cartridge-phpUpgrade rubygem-openshift-origin-frontend-haproxy-sni-proxyUpgrade openshift-origin-cartridge-jenkins-clientUpgrade openshift-origin-cartridge-jbossewsUpgrade jenkins-plugin-openshift-pipelineUpgrade openshift-origin-brokerUpgrade ImageMagickUpgrade libcgroupUpgrade rubygem-openshift-origin-admin-consoleUpgrade openshift-origin-node-utilUpgrade openshift-origin-cartridge-mysqlUpgrade rhcUpgrade openshift-origin-cartridge-cronUpgrade openshift-origin-cartridge-jenkinsUpgrade openshift-origin-cartridge-pythonUpgrade openshift-origin-cartridge-jbosseap | Jun 18, 2018 | May 11, 2016 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub