jenkins_bitbucket_server_integration_plugin vulnerabilities

CVEs whose affected-version data names the jenkins_bitbucket_server_integration_plugin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-92138Medium· 4.2

5d ago

The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the `oauth_callback` URL from the submitted form rather than from the server-side stored request token, allowing attackers to hijack …

The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the `oauth_callback` URL from the submitted form rather than from the server-side stored request token, allowing attackers to hijack …

▾ SunlitJenkins Project · Jenkins Bitbucket Server Integration PluginEPSS 0.10%via NVD