Jenkins Saml vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jenkins Saml: 1 record(s), with affected versions and fixes.
cpe:2.3:a:jenkins:saml

CVE-2025-64131 High · 7.5 CWE-294 Oct 29, 2025

Authentication Bypass by Capture-replay in Jenkins Saml

Jenkins SAML Plugin 4.583.vc68232f7018a_ and earlier does not implement a replay cache, allowing attackers able to obtain information about the SAML authentication flow between a user's web browser and Jenkins to replay those requests, authenticating to Jenkins as that user.