Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.jenkins-ci.plugins:bitbucket-oauth

4 known vulnerabilities (1 critical, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 critical, 2 medium
Registry
Maven Central

Advisories 4

  • CVE-2026-48924Medium 4.3

    Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing…

    Affected: fixed in 0.18.

  • CVE-2023-24428Medium 5.7

    A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into…

    Affected: fixed in 0.13.

  • CVE-2023-24427Critical 9.8

    Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login.

    Affected: fixed in 0.13.

  • Jenkins Bitbucket OAuth Plugin 0.9 and earlier stored credentials unencrypted in the global config.xml configuration file on the Jenkins…

    Affected: fixed in 0.10.