Jenkins Bitbucket Server Integration Plugin跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products. jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier versions are vulnerable to a cross-site scripting vulnerability that stems from the server The integration plugin does not restrict the URL scheme for callback URLs on OAuth users, and an attacker able to create BitBucket Server consumers could exploit the vulnerability to execute JavaScript code on the client side.