Jenkins Bitbucket Push and Pull Request Plugin vulnerabilities

1 known vulnerability in Jenkins Bitbucket Push and Pull Request Plugin from Jenkins. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Jenkins Bitbucket Push and Pull Request Plugin: Server-Side Request Forgery

  CVE-2023-41937Sep 6, 2023Jenkins

  Jenkins Bitbucket Push and Pull Request Plugin 2.4.0 through 2.8.3 (both inclusive) trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbuck