jenkinsci/bitbucket-oauth-plugin · Security
Jenkins Bitbucket OAuth Plugin does not restrict the redirect URL after login
- GHSA ID
- GHSA-r8fj-rff6-f7h5
- CVE ID
- CVE-2026-48924
- Severity
- medium
- Published
- Updated
- CVSS
- 4.3 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
- CVSS v3
- 4.3 · CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Description
Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login.
This allows attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site after successful authentication.
Bitbucket OAuth Plugin 0.18 only redirects to relative (Jenkins) URLs.
CWEs
- CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')