io.jenkins.plugins:bitbucket-kubernetes-credentials (>=202.v15b_72a_698524, <=467.vdffa_a_9249dc5) potentially affected by CVE-2025-24398 via io.jenkins.plugins:atlassian-bitbucket-server-integration (>=3.4.2, <=4.1.1)

io.jenkins.plugins:atlassian-bitbucket-server-integration MAVEN version =3.4.2, =202.v15b72a698524, =467.vdffaa9249dc5 Source cves: CVE-2025-24398 Source advisory: GHSA-QJW6-XVRM-5F2H...

Bitbucket Server Integration Plugin allows bypassing CSRF protection for any URL

An extension point in Jenkins allows selectively disabling cross-site request forgery CSRF protection for specific URLs. Bitbucket Server Integration Plugin implements this extension point to support OAuth 1.0 authentication. In Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 both inclusi...

io.jenkins.plugins:bitbucket-kubernetes-credentials (>=202.v15b_72a_698524, <=467.vdffa_a_9249dc5) potentially affected by CVE-2025-24398 via io.jenkins.plugins:atlassian-bitbucket-server-integration (>=3.4.2, <=4.1.1)

io.jenkins.plugins:atlassian-bitbucket-server-integration MAVEN version =3.4.2, =202.v15b72a698524, =467.vdffaa9249dc5 Source cves: CVE-2025-24398 Source advisory: MEND:CVE-2025-24398...

CVE-2025-24398

Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 both inclusive allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins...

CVE-2025-24398

Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 both inclusive allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins...

CVE-2025-24398

Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 both inclusive allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins...

PT-2025-5356 · Jenkins · Jenkins Bitbucket Server Integration Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Bitbucket Server Integration Plugin versions 2.1.0 through 4.1.3 Description: The issue allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins. This is due to an overly permissive...

Jenkins Plugin: Bitbucket Server Integration – Cross-Site Request Forgery Vulnerability

Jenkins and Jenkins plugin are both Jenkins open source products.Jenkins is an application. An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins plugin is an application software plugin. A security vulnerability in...

CVE-2025-24398: Cross-Site Request Forgery (CSRF)

Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 both inclusive allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins...

[SECURITY] Fedora 40 Update: clamav-1.0.7-1.fc40

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

org.infinispan:infinispan-server-integration (12.1.16.final), org.infinispan:infinispan-server-integrationtests-commons (12.1.16.final) +6 more potentially affected by CVE-2023-3629 via org.infinispan:infinispan-server-rest (12.1.16.final)

org.infinispan:infinispan-server-rest MAVEN version 12.1.16.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-rest and may be impacted: - org.infinispan:infinispan-server-integration 12.1.16.final -...

org.infinispan:infinispan-distribution (13.0.14.final), org.infinispan:infinispan-server-integration (13.0.14.final) +7 more potentially affected by CVE-2023-3629 via org.infinispan:infinispan-server-rest (13.0.14.final)

org.infinispan:infinispan-server-rest MAVEN version 13.0.14.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-rest and may be impacted: - org.infinispan:infinispan-distribution 13.0.14.final -...

org.infinispan:infinispan-distribution (13.0.20.final), org.infinispan:infinispan-server-integration (13.0.20.final) +7 more potentially affected by CVE-2023-3629 via org.infinispan:infinispan-server-rest (13.0.20.final)

org.infinispan:infinispan-server-rest MAVEN version 13.0.20.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-rest and may be impacted: - org.infinispan:infinispan-distribution 13.0.20.final -...

org.infinispan:infinispan-distribution (13.0.13.final), org.infinispan:infinispan-server-integration (13.0.13.final) +7 more potentially affected by CVE-2023-3628 via org.infinispan:infinispan-server-rest (13.0.13.final)

org.infinispan:infinispan-server-rest MAVEN version 13.0.13.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-rest and may be impacted: - org.infinispan:infinispan-distribution 13.0.13.final -...

org.infinispan:infinispan-distribution (13.0.12.final), org.infinispan:infinispan-server-integration (13.0.12.final) +7 more potentially affected by CVE-2023-3629 via org.infinispan:infinispan-server-rest (13.0.12.final)

org.infinispan:infinispan-server-rest MAVEN version 13.0.12.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-rest and may be impacted: - org.infinispan:infinispan-distribution 13.0.12.final -...

org.infinispan:infinispan-server-integration (12.1.13.final), org.infinispan:infinispan-server-integrationtests-commons (12.1.13.final) +6 more potentially affected by CVE-2023-3628 via org.infinispan:infinispan-server-rest (12.1.13.final)

org.infinispan:infinispan-server-rest MAVEN version 12.1.13.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-rest and may be impacted: - org.infinispan:infinispan-server-integration 12.1.13.final -...

org.infinispan:infinispan-server-integration (12.1.15.final), org.infinispan:infinispan-server-integrationtests-commons (12.1.15.final) +6 more potentially affected by CVE-2023-3628 via org.infinispan:infinispan-server-rest (12.1.15.final)

org.infinispan:infinispan-server-rest MAVEN version 12.1.15.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-rest and may be impacted: - org.infinispan:infinispan-server-integration 12.1.15.final -...

org.infinispan:infinispan-distribution (13.0.21.final), org.infinispan:infinispan-server-integration (13.0.21.final) +7 more potentially affected by CVE-2023-3628 via org.infinispan:infinispan-server-rest (13.0.21.final)

org.infinispan:infinispan-server-rest MAVEN version 13.0.21.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-rest and may be impacted: - org.infinispan:infinispan-distribution 13.0.21.final -...

org.infinispan:infinispan-distribution (13.0.17.final), org.infinispan:infinispan-server-integration (13.0.17.final) +7 more potentially affected by CVE-2023-3629 via org.infinispan:infinispan-server-rest (13.0.17.final)

org.infinispan:infinispan-server-rest MAVEN version 13.0.17.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-server-rest and may be impacted: - org.infinispan:infinispan-distribution 13.0.17.final -...

org.infinispan:infinispan-distribution (13.0.14.final), org.infinispan:infinispan-server-integration (13.0.14.final) +6 more potentially affected by CVE-2023-5384 via org.infinispan:infinispan-cachestore-sql (13.0.14.final)

org.infinispan:infinispan-cachestore-sql MAVEN version 13.0.14.final is affected by a known vulnerability. The following packages have a transitive dependency on org.infinispan:infinispan-cachestore-sql and may be impacted: - org.infinispan:infinispan-distribution 13.0.14.final -...