io.jenkins.plugins:bitbucket-kubernetes-credentials (>=202.v15b_72a_698524, <=662.v96d8b_a_90e07e) potentially affected by CVE-2026-92138 via io.jenkins.plugins:atlassian-bitbucket-server-integration (>=3.4.2, <=6.0.0)

io.jenkins.plugins:atlassian-bitbucket-server-integration MAVEN version =3.4.2, =202.v15b72a698524, =662.v96d8ba90e07e Source cves: CVE-2026-92138 Source advisory: MEND:CVE-2026-92138...

OAuth access token hijacking via callback URL manipulation in atlassian-bitbucket-server-integration

atlassian-bitbucket-server-integration implements an OAuth provider for Bitbucket Server. The OAuth authorization endpoint in atlassian-bitbucket-server-integration 6.0.1 and earlier reads the oauthcallback URL from the submitted form rather than from the server-side stored request token. An...

io.jenkins.plugins:bitbucket-kubernetes-credentials (>=202.v15b_72a_698524, <=467.vdffa_a_9249dc5) potentially affected by CVE-2025-24398 via io.jenkins.plugins:atlassian-bitbucket-server-integration (>=3.4.2, <=4.1.1)

io.jenkins.plugins:atlassian-bitbucket-server-integration MAVEN version =3.4.2, =202.v15b72a698524, =467.vdffaa9249dc5 Source cves: CVE-2025-24398 Source advisory: OSV:GHSA-QJW6-XVRM-5F2H...

io.jenkins.plugins:bitbucket-kubernetes-credentials (>=202.v15b_72a_698524, <=467.vdffa_a_9249dc5) potentially affected by CVE-2025-24398 via io.jenkins.plugins:atlassian-bitbucket-server-integration (>=3.4.2, <=4.1.1)

io.jenkins.plugins:atlassian-bitbucket-server-integration MAVEN version =3.4.2, =202.v15b72a698524, =467.vdffaa9249dc5 Source cves: CVE-2025-24398 Source advisory: GHSA-QJW6-XVRM-5F2H...

io.jenkins.plugins:bitbucket-kubernetes-credentials (>=202.v15b_72a_698524, <=467.vdffa_a_9249dc5) potentially affected by CVE-2025-24398 via io.jenkins.plugins:atlassian-bitbucket-server-integration (>=3.4.2, <=4.1.1)

io.jenkins.plugins:atlassian-bitbucket-server-integration MAVEN version =3.4.2, =202.v15b72a698524, =467.vdffaa9249dc5 Source cves: CVE-2025-24398 Source advisory: MEND:CVE-2025-24398...