← Database

CVE-2025-24398

HIGH CVSS: 8.8 Published: 2025-01-22 Modified: 2026-06-17

Description

Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.

Affected Platforms

Jenkins Bitbucket Server Integration

Weakness Type

CWE-352

References