Jenkins Project Jenkins Publish to Bitbucket Plugin vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Jenkins Project Jenkins Publish to Bitbucket Plugin: 3 record(s), with affected versions and fixes.
CVE-2025-64150
Medium · 5.4
CWE-862 Oct 29, 2025
Missing Authorization in Jenkins Publish To Bitbucket
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2025-64149
Medium · 5.4
CWE-352 Oct 29, 2025
Cross-Site Request Forgery (CSRF) in Jenkins Publish To Bitbucket
A cross-site request forgery (CSRF) vulnerability in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2025-64148
Medium · 4.3
CWE-862 Oct 29, 2025
Missing Authorization in Jenkins Publish To Bitbucket
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.