CVE-2025-24398 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF protection of any tar…
High CVSS: 8.8

CVE-2025-24398

Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.
Vendor
Jenkins
Product
Bitbucket Server Integration
CWE
CWE-352
Yayın Tarihi
2025-01-22 17:15:13
Güncelleme
2025-06-06 15:23:36
Source Identifier
jenkinsci-cert@googlegroups.com
KEV Date Added
-

Kategoriler

CWE-352 Bitbucket Server Integration HIGH Jenkins 2025

Referanslar

https://www.jenkins.io/security/advisory/2025-01-22/#SECURITY-3434