← CVE Intelligence

CVE-2026-48924

Jenkins Project / Jenkins Bitbucket OAuth Plugin PUBLISHED

Description (CNA)

Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.

Affected (CNA)

Vendor / productVersions
Jenkins Project / Jenkins Bitbucket OAuth Pluginaffected 0 through 0.17

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.