/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CVE-2025-27625

Published

Last updated

NVD

https://nvd.nist.gov/vuln/detail/CVE-2025-27625

Severity

4.3

Medium

CVSS CVSS_V3

Description

In Jenkins 2.499 and earlier, LTS 2.492.1 and earlier, redirects starting with backslash (\) characters are considered safe, allowing attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site, because browsers interpret these characters as part of scheme-relative redirects.

References

  • https://images.chainguard.dev/security/CGA-ghvv-x6mm-7jj4

Affected packages


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing