CVE Intelligence

Jenkins Bitbucket Push And Pull Request vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Jenkins Bitbucket Push And Pull Request: 1 record(s), with affected versions and fixes.
cpe:2.3:a:jenkins:bitbucket_push_and_pull_request

CVE-2026-57289 Medium · 4.8 CWE-295 Jun 24, 2026
Improper Certificate Validation in Jenkins Bitbucket Push And Pull Request
Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections sending Bearer token authenticated requests to the configured Bitbucket Server endpoint, allowing attackers able to intercept network traffic to capture the token.