CVE-2025-27625: Medium severity Jenkins Jenkins vulnerability
In Jenkins 2.499 and earlier, LTS 2.492.1 and earlier, redirects starting with backslash (\) characters are considered safe, allowing attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site, because browsers interpret these characters as part of scheme-relative redirects.
Other sources
Various features in Jenkins redirect users to partially user-controlled URLs inside Jenkins. To prevent open redirect vulnerabilities, Jenkins limits redirections to safe URLs (neither absolute nor scheme-relative/network-path reference).
In Jenkins 2.499 and earlier, LTS 2.492.1 and earlier, redirects starting with backslash (\) characters are considered safe.
This allows attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site, because browsers interpret these characters as part of scheme-relative redirects.
Jenkins 2.500, LTS 2.492.2 considers redirects to URLs starting with backslash (\) characters to be unsafe, rejecting such redirects.
— GitHub
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/org.jenkins-ci.main:jenkins-coreto a version that resolves this vulnerability.Fixed in 2.500 - Upgrade
Upgrade
maven/org.jenkins-ci.main:jenkins-coreto a version that resolves this vulnerability.Fixed in 2.492.2
Event History
Frequently Asked Questions
What is the severity of CVE-2025-27625?
CVE-2025-27625 is considered a medium severity vulnerability due to its potential to facilitate phishing attacks.
How do I fix CVE-2025-27625?
To fix CVE-2025-27625, upgrade Jenkins to version 2.500 or later, or Jenkins LTS to version 2.492.2 or later.
What are the risks associated with CVE-2025-27625?
The risks associated with CVE-2025-27625 include the possibility of users being redirected to malicious sites without their knowledge.
Who is affected by CVE-2025-27625?
CVE-2025-27625 affects users of Jenkins 2.499 and earlier, as well as Jenkins LTS 2.492.1 and earlier.
What are the symptoms of exploitation for CVE-2025-27625?
Exploitation of CVE-2025-27625 may manifest as unexpected redirects to external sites when navigating within Jenkins.