CVE-2025-24398 — Jenkins Project / Jenkins Bitbucket Server Integration Plugin

CVE-2025-24398

Jenkins Project / Jenkins Bitbucket Server Integration Plugin PUBLISHED

Description (CNA)

Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.

Affected (CNA)

Vendor / product	Versions
Jenkins Project / Jenkins Bitbucket Server Integration Plugin	affected 2.1.0 through 4.1.3

CWE

No CWE identifiers supplied.

References

https://www.jenkins.io/security/advisory/2025-01-22/#SECURITY-3434

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.