Bitbucket OAuth access token exposed in the build log by Bitbucket Branch Source Plugin

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-39460 · ADVISORY
• jenkinsci/bitbucket-branch-source-plugin commit ad359b3 · WEB
• jenkinsci/bitbucket-branch-source-plugin · PACKAGE
• jenkins.io/security/advisory/2024-06-26 · WEB
• openwall.com/lists/oss-security/2024/06/26/2 · WEB

Lỗ hổng khác của org.jenkins-ci.plugins:cloudbees-bitbucket-branch-source

• CVE-2024-28152TRUNG BÌNH 6.3In Jenkins Bitbucket Branch Source Plugin 866.vdea_7dcd3008e and earlier, except 848.850.v6a_a_2a_234a_c81, when discovering pull requests f…
• CVE-2022-20619CAO 7.1A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers t…
• CVE-2022-20618TRUNG BÌNH 4.3A missing permission check in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers with Overall/Read access…