4.3
Medium
CVE-2026-48924 Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to…
Description
Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Bitbucket OAuth Plugin 0.17 | earliest → 0.17 | No fix stated |
Other CVEs of Jenkins Bitbucket OAuth Plugin
The 4 CVEs of Jenkins Bitbucket OAuth Plugin →
CVE-2023-24427
Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login
9.8
Critical
CVE-2023-24428
A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to…
5.7
Medium
CVE-2019-10460
Jenkins Bitbucket OAuth Plugin 0.9 and earlier stored credentials unencrypted in the global config.xml configuration…
Not rated