CVE-2025-24398

—

CVSS 3.1

8.8 high

EPSS

<1%p22

Published

Jan 22, 2025 (Jan 22, 2025)

Modified

Jun 17, 2026

Description

Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.

Vendors: jenkins
Products: bitbucket server integration
Weakness: CWE-352
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.