CVE-2023-37947: Jenkins OpenShift Login Plugin vulnerable to Open Redirect

The vulnerability centers around improper redirect validation during OAuth2 login flow. The doFinishLogin method is the logical endpoint handling authentication completion where redirect parameter processing occurs. The getRedirectUrl helper would be involved in URL construction. Patches would have modified these to add validation (like checking for relative URLs), but in vulnerable versions they process the 'from' parameter without sufficient checks. These functions would appear in stack traces when processing malicious redirect parameters during authentication flows.