5.7
Medium
CVE-2023-24428 A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to…
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into logging in to the attacker's account.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Bitbucket OAuth Plugin 0.12 | earliest → 0.12 | No fix stated |
Other CVEs of Jenkins Bitbucket OAuth Plugin
The 4 CVEs of Jenkins Bitbucket OAuth Plugin →
CVE-2026-48924
Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to…
4.3
Medium
CVE-2023-24427
Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login
9.8
Critical
CVE-2019-10460
Jenkins Bitbucket OAuth Plugin 0.9 and earlier stored credentials unencrypted in the global config.xml configuration…
Not rated