Login Request a demo
BO
Product
Bitbucket Oauth
by Jenkins · last CVE May 27, 2026
4
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 1High 1Medium 2Low 0
Severity
All severities4Critical1High1Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Bitbucket Oauth to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2023-24427
9.8
1%
Jan 26
Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login
Affected: through 0.13
CVE-2019-10460
7.8
0%
Oct 23
Jenkins Bitbucket OAuth Plugin 0.9 and earlier stored credentials unencrypted in the global config.xml configuration file on the Jenkins master where they could be viewed by users…
Affected: through 0.9
CVE-2023-24428
5.7
0%
Jan 26
A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into logging in to the attacker's account
Affected: before 0.13
CVE-2026-48924
4.3
0%
May 27
Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks
Affected: through 0.17
Showing 4