Skip to content
Sign in
5.4 Medium

CVE-2025-64150 A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read…

Description

A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

Affected products and versions

Product Affected versions Fixed in
Jenkins Publish to Bitbucket Plugin 0.4 earliest → 0.4 No fix stated

Other CVEs of Jenkins Publish to Bitbucket Plugin

The 3 CVEs of Jenkins Publish to Bitbucket Plugin →
CVE-2025-64148 A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read… 4.3 Medium CVE-2025-64149 A cross-site request forgery (CSRF) vulnerability in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows… 5.4 Medium
Track this CVE