> CVE-2026-48924

« BACK_TO_HOME
PUBLISHED
2026-05-27 15:16
MODIFIED
2026-05-27 15:16
EPSS (Prob. Exploit)
0.21%
Top 89.1%
DATA SOURCES:
NVD 🔗 2026-05-27 FIRST EPSS 🔗 2026-11-01 GITHUB 🔗 2026-11-05 OSV 🔗 2026-11-02

> DESCRIPTION

Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> GITHUB SECURITY ADVISORY

GHSA-r8fj-rff6-f7h5 MODERATE

Jenkins Bitbucket OAuth Plugin does not restrict the redirect URL after login

AFFECTED PACKAGES:
MAVEN / org.jenkins-ci.plugins:bitbucket-oauth
<= 0.17
Fixed in: 0.18

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

AFFECTED PACKAGES:
Unknown / Unknown
17 versions affected
ALIASES:
GHSA-r8fj-rff6-f7h5

> HISTORIQUE DES MODIFICATIONS

Première apparition
27/05/2026 15:16
Source: NVD
Total des modifications: 0 Dernière mise à jour: 5 months ago

> REFERENCES

https://www.jenkins.io/security/advisory/2026-05-27/#SECURITY-3761
« BACK_TO_HOME