CVE-2025-64150

A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL using attacker-specified credentials IDs obtained through another method, capturing credentials stored in Jenkins...

CVE-2025-64150

creationtimestamp| type| source ---|---|--- 2025-10-29 13:51:52+00:00| seen| Telegram/1JXcU5ln2a3z8kds-tWKg4my0RP5dz1I0ai8bhrecAmwf0...