CVE-2026-48924
BaseFortify
Publication date: 2026-05-27
Last updated on: 2026-05-27
Assigner: Jenkins Project
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| jenkinsci | bitbucket_oauth_plugin | to 0.17 (exc) |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-UNKNOWN |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The Jenkins Bitbucket OAuth Plugin version 0.17 and earlier has a vulnerability where it does not restrict the redirect URL after login.
This flaw allows attackers to manipulate the redirect URL, potentially leading users to malicious sites.
As a result, attackers can perform phishing attacks by redirecting users to fraudulent websites after they log in.
How can this vulnerability impact me? :
This vulnerability can impact you by enabling attackers to redirect authenticated users to malicious websites.
Such phishing attacks can lead to credential theft, unauthorized access, or other security breaches.
It undermines the trust in the login process and can compromise the security of your Jenkins environment.