-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from improper state parameter handling in OAuth flow. The critical points would be: 1) Callback handler (doFinishLogin) where state validation should occur, and 2) Session initiation (createSession) where state should be generated. While exact code changes aren't shown, the advisory's focus on state management and OAuth flow patterns indicate these are the most likely vulnerable entry points. Confidence is medium due to inference from vulnerability description rather than direct patch analysis.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:github-oauth | maven | <= 0.31 | 0.32 |