Bitbucket Branch Source (Jenkins) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 63 known versions, newest CVE from 2024-06-26. Vendor: Jenkins.

CVEs of Bitbucket Branch Source

• CVE-2024-39460 - CVSS 4.3 (medium), 2024-06-26: Jenkins Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in…
• CVE-2024-28152 - CVSS 6.3 (medium), 2024-03-06: In Jenkins Bitbucket Branch Source Plugin 866.vdea_7dcd3008e and earlier, except 848.850.v6a_a_2a_234a_c81, when discovering pull requests from forks, the…
• CVE-2022-20619 - CVSS 7.1 (high), 2022-01-12: A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers to connect to an…
• CVE-2022-20618 - CVSS 4.3 (medium), 2022-01-12: A missing permission check in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers with Overall/Read access to enumerate…