CVE-2023-24427

creationtimestamp| type| source ---|---|--- 2023-01-27 00:46:51+00:00| seen| https://t.me/cibsecurity/56999 2025-04-02 14:33:55+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10078...

CVE-2023-24427

Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login...

CVE-2023-24427

CVE-2023-24427 : Jenkins Bitbucket OAuth Plugin (version 0.12 and earlier) does not invalidate the existing session on login, enabling a session-fixation scenario. Public sources consistently describe the issue as a login-session security defect that could allow a malicious actor with social engi...