Jenkins Bitbucket Branch Source Plugin Cross-Site Request Forgery Vulnerability

Jenkins is a Jenkins open source application. An open source automation server, Jenkins provides hundreds of plugins to support building, deploying, and automating any project.The Jenkins Bitbucket Branch Source Plugin is vulnerable to cross-site request forgery, which stems from a WEB application that does not adequately verify that the request is from a trusted user. An attacker could use this vulnerability to spoof malicious requests to trick victims into clicking through to perform sensitive actions.