[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8x9z04umXrnMncap2ePbdBZwMEjDFLsNeYM1NG3amsk":3,"g5a-risk:CVE-2023-50771":106},{"success":4,"data":5,"meta":103},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":30,"epssPercentile":27,"epssTimeSeries":31,"severity":32,"affectedProducts":33,"affectedProductsCount":39,"references":40,"referencesCount":55,"weaknesses":56,"weaknessesCount":39,"isActivelyExploited":65,"cisaInfo":27,"otxData":27,"relatedBlogPosts":66,"seoMetadata":67,"configurations":92,"relatedVendorCves":101,"notableEvents":102},"CVE-2023-50771","What is CVE-2023-50771?","Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing attacks.","Jenkins OpenId Connect Authentication Plugin 2.6 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allow...","2023-12-13T18:15:44.09","2025-05-28T13:54:59.073",6.1,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:R\u002FS:C\u002FC:L\u002FI:L\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":22,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","NONE","REQUIRED","CHANGED","MEDIUM",null,2.8,2.7,0.006,[30,30,30,30,30,30,30],"Medium",[34],{"vendor":35,"product":36,"version":37,"criteria":38,"vulnerable":4},"jenkins","openid_connect_authentication","*","cpe:2.3:a:jenkins:openid_connect_authentication:*:*:*:*:*:jenkins:*:*",1,[41,46,51,53],{"url":42,"source":43,"tags":44},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2023\u002F12\u002F13\u002F4","Openwall",[45],"Mailing List",{"url":47,"source":48,"tags":49},"https:\u002F\u002Fwww.jenkins.io\u002Fsecurity\u002Fadvisory\u002F2023-12-13\u002F#SECURITY-2979","Jenkins",[50],"Vendor Advisory",{"url":42,"source":43,"tags":52},[45],{"url":47,"source":48,"tags":54},[50],4,[57],{"id":58,"name":59,"description":60,"extendedDescription":61,"status":62,"abstraction":63,"structure":64},"CWE-601","URL Redirection to Untrusted Site ('Open Redirect')","A web application accepts a user-controlled input that specifies a link to an external site, and uses that link in a Redirect. This simplifies phishing attacks.","An http parameter may contain a URL value and could cause the web application to redirect the request to the specified URL. By modifying the URL value to a malicious site, an attacker may successfully launch a phishing scam and steal user credentials. Because the server name in the modified link is identical to the original site, phishing attempts have a more trustworthy appearance. Whether this issue poses a vulnerability will be subject to the intended behavior of the application. For example, a search engine might intentionally provide redirects to arbitrary URLs.","Draft","Base","Simple",false,[],{"title":68,"metaDescription":69,"keywords":70,"canonicalUrl":71,"structuredData":72},"What is CVE-2023-50771? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-50771, a medium severity cyber security vulnerability from 2023. Jenkins OpenId Connect Authentication Plugin 2.6 and earl...","CVE-2023-50771, CVE-2023-50771 vulnerability, CVE-2023-50771 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2023, CVSS score, exploit, patch, remediation, jenkins security, openid_connect_authentication vulnerability","\u002Fwhat-is\u002Fcve-2023-50771",{"@context":73,"@type":74,"headline":68,"description":69,"datePublished":10,"dateModified":11,"author":75,"publisher":79,"about":83,"mainEntityOfPage":87,"articleSection":90,"keywords":91},"https:\u002F\u002Fschema.org","TechArticle",{"@type":76,"name":77,"url":78},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":76,"name":77,"url":78,"logo":80},{"@type":81,"url":82},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":84,"name":6,"description":85,"additionalType":86},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":88,"@id":89},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-50771","Cybersecurity","CVE-2023-50771, CVE-2023-50771 vulnerability, CVE-2023-50771 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[93],{"Operator":27,"Negate":27,"Nodes":94},[95],{"Operator":96,"Negate":27,"CPEMatch":97},"OR",[98],{"Vulnerable":4,"Criteria":38,"MatchCriteriaID":99,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":100},"422915A4-85E3-4CDC-AE9B-965977BAF41F","2.6",[],[],{"lastModified":11,"cacheTime":104,"version":105},1792356191372,"2.0",{"score":107,"band":108,"action":109,"scoredAt":110},22,"Low","Monitor","2026-10-16T07:00:08.764676+00:00"]