CVE-2022-20619

2022-01-1220:15:09

Google

osv.dev

0.001 Low

EPSS

Percentile

51.1%

JSON

A cross-site request forgery (CSRF) vulnerability in Jenkins Bitbucket Branch Source Plugin 737.vdf9dc06105be and earlier allows attackers to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins.

CPENameOperatorVersion
bitbucket-branch-source-plugineqcloudbees-bitbucket-branch-source-2.2.12
bitbucket-branch-source-plugineqcloudbees-bitbucket-branch-source-2.5.0
bitbucket-branch-source-plugineqcloudbees-bitbucket-branch-source-2.0.2
bitbucket-branch-source-plugineqbitbucket-branch-source-1.3
bitbucket-branch-source-plugineqcloudbees-bitbucket-branch-source-2.4.0
bitbucket-branch-source-plugineqcloudbees-bitbucket-branch-source-2.9.2
bitbucket-branch-source-plugineqcloudbees-bitbucket-branch-source-2.9.0
bitbucket-branch-source-plugineqcloudbees-bitbucket-branch-source-2.9.8
bitbucket-branch-source-plugineqcloudbees-bitbucket-branch-source-2.2.0
bitbucket-branch-source-plugineqcloudbees-bitbucket-branch-source-2.2.3

Name	Operator	Version
bitbucket-branch-source-plugin	eq	cloudbees-bitbucket-branch-source-2.2.12
bitbucket-branch-source-plugin	eq	cloudbees-bitbucket-branch-source-2.5.0
bitbucket-branch-source-plugin	eq	cloudbees-bitbucket-branch-source-2.0.2
bitbucket-branch-source-plugin	eq	bitbucket-branch-source-1.3
bitbucket-branch-source-plugin	eq	cloudbees-bitbucket-branch-source-2.4.0
bitbucket-branch-source-plugin	eq	cloudbees-bitbucket-branch-source-2.9.2
bitbucket-branch-source-plugin	eq	cloudbees-bitbucket-branch-source-2.9.0
bitbucket-branch-source-plugin	eq	cloudbees-bitbucket-branch-source-2.9.8
bitbucket-branch-source-plugin	eq	cloudbees-bitbucket-branch-source-2.2.0
bitbucket-branch-source-plugin	eq	cloudbees-bitbucket-branch-source-2.2.3