Lucene search

K
osvGoogleOSV:CVE-2022-28133
HistoryMar 29, 2022 - 1:15 p.m.

CVE-2022-28133

2022-03-2913:15:08
Google
osv.dev
3
jenkins
bitbucket server
integration plugin
xss
vulnerability
oauth
consumers

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

22.0%

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create BitBucket Server consumers.

AI Score

5.4

Confidence

High

EPSS

0.001

Percentile

22.0%