Jenkins Bitbucket Server Integration Plugin (Jenkins Project) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-16. Vendor: Jenkins Project.

CVEs of Jenkins Bitbucket Server Integration Plugin

• CVE-2026-92138 - CVSS 4.2 (medium), 2026-09-16: The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the `oauth_callback` URL from the submitted form…
• CVE-2025-24398 - CVSS 8.8 (high), 2025-01-22: Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF protection of any…
• CVE-2022-28134 - CVSS 5.4 (medium), 2022-03-29: Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with…
• CVE-2022-28133 - CVSS 5.4 (medium), 2022-03-29: Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in a stored…