← Database

CVE-2023-24428

MEDIUM CVSS: 5.7 Published: 2023-01-26 Modified: 2026-06-17

Description

A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket OAuth Plugin 0.12 and earlier allows attackers to trick users into logging in to the attacker's account.

Affected Platforms

Jenkins Bitbucket Oauth

Weakness Type

CWE-352, CWE-352

References