Missing permission checks in Jekins Bitbucket Server Integration Plugin

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2022-28134 · ADVISORY
• jenkinsci/atlassian-bitbucket-server-integration-plugin · PACKAGE
• jenkins.io/security/advisory/2022-03-29 · WEB
• openwall.com/lists/oss-security/2022/03/29/1 · WEB

io.jenkins.plugins:atlassian-bitbucket-server-integration のその他の脆弱性

• CVE-2025-24398高 8.8Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF p…
• CVE-2022-28133中 5.4Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in …