Package · Maven

io.jenkins.plugins:bitbucket-push-and-pull-request

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2023-41937

SSRF vulnerability in Jenkins Bitbucket Push and Pull Request Plugin allows capturing credentials

Jenkins Bitbucket Push and Pull Request Plugin 2.4.0 through 2.8.3 (both inclusive) trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbuc…

Jenkins Project Jenkins Bitbucket Push and Pull Request Plugin io.jenkins.plugins:bitbucket-push-and-pull-request Web / CMS Maven

Sep 6, 2023