Missing permission checks in Jekins Bitbucket Server Integration Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2022-28134 · ADVISORY
• jenkinsci/atlassian-bitbucket-server-integration-plugin · PACKAGE
• jenkins.io/security/advisory/2022-03-29 · WEB
• openwall.com/lists/oss-security/2022/03/29/1 · WEB

Lỗ hổng khác của io.jenkins.plugins:atlassian-bitbucket-server-integration

• CVE-2025-24398CAO 8.8Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF p…
• CVE-2022-28133TRUNG BÌNH 5.4Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in …