Lucene search

K
osvGoogleOSV:GHSA-45V7-65Q8-X294
HistoryMar 30, 2022 - 12:00 a.m.

Stored XSS vulnerability in Jenkins Bitbucket Server Integration Plugin

2022-03-3000:00:26
Google
osv.dev
11
bitbucket server
jenkins
stored xss

EPSS

0.001

Percentile

22.0%

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to create BitBucket Server consumers.

EPSS

0.001

Percentile

22.0%