Jenkins

Bitbucket Push And Pull Request

1 vulnerability found

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2023-41937

  • EPSS 0.05%
  • Published 06.09.2023 13:15:10
  • Last modified 21.11.2024 08:21:57

Jenkins Bitbucket Push and Pull Request Plugin 2.4.0 through 2.8.3 (both inclusive) trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to captu...