Bitbucket Server Integration (Jenkins) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 46 known versions, newest CVE from 2025-01-22. Vendor: Jenkins.

CVEs of Bitbucket Server Integration

• CVE-2025-24398 - CVSS 8.8 (high), 2025-01-22: Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF protection of any…
• CVE-2022-28134 - CVSS 5.4 (medium), 2022-03-29: Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with…
• CVE-2022-28133 - CVSS 5.4 (medium), 2022-03-29: Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in a stored…