345 matches found
Missing Authorization Checks
org.jenkins-ci.plugins, publish-to-bitbucket is vulnerable to missing authorization checks. The vulnerability is due to a missing permission check when accessing credential-related functionality, which allows an attacker with Overall/Read permission to enumerate credential IDs stored in Jenkins...
CVE-2025-64148
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
GHSA-V549-7PM5-F8QR Jenkins Publish to Bitbucket Plugin is missing a permissions check
Jenkins Publish to Bitbucket Plugin 0.4 and earlier does not perform a permission check in a method implementing form validation. This allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins. Those can be used as part of an attack to capture the...
CVE-2025-64148
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2025-64148
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2025-64148
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
CVE-2025-64148
CVE-2025-64148: Jenkins Publish to Bitbucket Plugin 0.4 and earlier has a missing permission check that allows users with Overall/Read permission to enumerate credentials IDs stored in Jenkins. Connected advisories (Red Hat, GitHub GHSA, OSV, EUVD, NVD, etc.) corroborate the issue and impact. The...
CVE-2025-64148
A missing permission check in Jenkins Publish to Bitbucket Plugin 0.4 and earlier allows attackers with Overall/Read permission to enumerate credentials IDs of credentials stored in Jenkins...
PT-2025-44297
Name of the Vulnerable Software and Affected Versions Jenkins Publish to Bitbucket Plugin versions 0.4 and earlier Description A flaw exists in the Jenkins Publish to Bitbucket Plugin where a missing permission check allows attackers possessing Overall/Read permission to enumerate credential IDs...
EUVD-2021-19501
Malware in sbrugna...
EUVD-2012-3769
Malware in sbrugna...
EUVD-2020-28016
Malware in sbrugna...
EUVD-2021-1426
Malware in sbrugna...
EUVD-2022-3207
Malicious code in bioql PyPI...
EUVD-2022-0550
Malicious code in bioql PyPI...
EUVD-2022-6248
Malicious code in bioql PyPI...
EUVD-2022-0711
Malicious code in bioql PyPI...
EUVD-2022-6890
Malicious code in bioql PyPI...