CWE-384

CVE-2023-24427

February 22, 2023 by godfreyd94

Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login.

CVE-2023-24456

February 22, 2023 by godfreyd94

Jenkins Keycloak Authentication Plugin 2.3.0 and earlier does not invalidate the previous session on login.

KubePi is a modern Kubernetes panel. A session fixation attack allows an attacker to hijack a legitimate user session, versions 1.6.3 and below are susceptible. A patch will be released in version 1.6.4.