Non notée
CVE-2022-20619 A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and…
Description
A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Jenkins Bitbucket Branch Source Plugin 737 | premières → 737.vdf9dc06105be | Pas de correctif indiqué |
| Jenkins Bitbucket Branch Source Plugin 725 | premières → < 725.vd9f8be0fa250 | 725.vd9f8be0fa250 |
| Jenkins Bitbucket Branch Source Plugin 2.9 | premières → < 2.9.11.2 | 2.9.11.2 |
Autres CVE de Jenkins Bitbucket Branch Source Plugin
Les 4 CVE de Jenkins Bitbucket Branch Source Plugin →
CVE-2024-39460
Jenkins Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part…
4.3
Moyenne
CVE-2024-28152
In Jenkins Bitbucket Branch Source Plugin 866.vdea_7dcd3008e and earlier, except 848.850.v6a_a_2a_234a_c81, when…
6.3
Moyenne
CVE-2022-20618
A missing permission check in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers with…
Non notée