Vulnerabilidades do Jenkins Publish To Bitbucket
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Jenkins Publish To Bitbucket: 3 registro(s), com versões afetadas e correções.cpe:2.3:a:jenkins:publish_to_bitbucket
CVE-2025-64150
Média · 5.4
CWE-862 29/10/2025
Missing Authorization em Jenkins Publish To Bitbucket
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2025-64149
Média · 5.4
CWE-352 29/10/2025
Cross-Site Request Forgery (CSRF) em Jenkins Publish To Bitbucket
A cross-site request forgery (CSRF) vulnerability in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.
CVE-2025-64148
Média · 4.3
CWE-862 29/10/2025
Missing Authorization em Jenkins Publish To Bitbucket
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins.