Jenkins SAML Single Sign On vulnerabilities

6 CVEs affecting Jenkins SAML Single Sign On, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-37945, published 2023-07-12.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2023-32992, published 2023-05-16. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. Missing permission checks in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allow attackers with Overall/Read permission to send an HTTP request to an attacker-specified URL and parse the…
CVE-2023-32991, published 2023-05-16. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier allows attackers to send an HTTP request to an attacker-specified URL and parse the…
CVE-2023-32995, published 2023-05-16. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A cross-site request forgery (CSRF) vulnerability in Jenkins SAML Single Sign On(SSO) Plugin 2.0.0 and earlier allows attackers to send an HTTP POST request with JSON body containing…
CVE-2023-37945, published 2023-07-12. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A missing permission check in Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 through 2.3.0 (both inclusive) allows attackers with Overall/Read permission to download a string representation of the…
CVE-2023-32994, published 2023-05-16. Low severity, CVSS 3.7. EPSS: 0.2% chance of exploitation in the next 30 days. Jenkins SAML Single Sign On(SSO) Plugin 2.1.0 and earlier unconditionally disables SSL/TLS certificate validation for connections to miniOrange or the configured IdP to retrieve SAML metadata, which…
CVE-2023-32993, published 2023-05-16. Medium severity, CVSS 4.8. EPSS: 0.2% chance of exploitation in the next 30 days. Jenkins SAML Single Sign On(SSO) Plugin 2.0.2 and earlier does not perform hostname validation when connecting to miniOrange or the configured IdP to retrieve SAML metadata, which could be abused…