Jenkins Project Jenkins OpenShift Login Plugin

• CVE-2023-37947 Unrated Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier improperly determines that a redirect URL after login is legitimately pointing to Jenkins, allowing attackers to perform phishing a 0.6%
• CVE-2023-37946 Unrated Jenkins OpenShift Login Plugin 1.1.0.227.v27e08dfb_1a_20 and earlier does not invalidate the previous session on login. 0.8%