PT-2026-48421 · Jenkins+1 · Jenkins+1
CVE-2026-53436
·
Published
2026-06-10
·
Updated
2026-08-12
CVSS v3.1
4.3
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Jenkins versions prior to 2.568
Jenkins LTS versions prior to 2.555.3
Description
An open redirect issue exists where the software improperly validates redirect URLs after login. When a URL contains relative path segments such as
./ or ../, the system incorrectly determines that the destination is legitimately pointing to the application, which can be leveraged by attackers to perform phishing attacks.Recommendations
Update Jenkins to version 2.568 or later.
Update Jenkins LTS to version 2.555.3 or later.
Fix
Open Redirect
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Jenkins
Red Os