Bitbucket Oauth (Jenkins) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 19 known versions, newest CVE from 2026-05-27. Vendor: Jenkins.

CVEs of Bitbucket Oauth

• CVE-2026-48924 - CVSS 4.3 (medium), 2026-05-27: Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.
• CVE-2023-24428 - CVSS 5.7 (medium), 2023-01-26: A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into logging in to the…
• CVE-2023-24427 - CVSS 9.8 (critical), 2023-01-26: Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login.
• CVE-2019-10460 - CVSS 7.8 (high), 2019-10-23: Jenkins Bitbucket OAuth Plugin 0.9 and earlier stored credentials unencrypted in the global config.xml configuration file on the Jenkins master where they…