CVE-2025-24398

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-24398
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-24398.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-24398
Aliases
Published
2025-01-22T17:15:13.760Z
Modified
2026-04-10T05:23:01.978575Z
Severity
  • 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.

References

Affected packages

Git / github.com/jenkinsci/atlassian-bitbucket-server-integration-plugin

Affected ranges

Type
GIT
Repo
https://github.com/jenkinsci/atlassian-bitbucket-server-integration-plugin
Events
Introduced
3e296850edc2f1ce39ae8ed8bb1c79e8981ae7ea
Fixed
933bf0177594feddb17a73aaa70e452d0a43e17d
Database specific 
{
    "versions": [
        {
            "introduced": "2.1.0"
        },
        {
            "fixed": "4.1.4"
        }
    ]
}

Affected versions

atlassian-bitbucket-server-integration-2.*
atlassian-bitbucket-server-integration-2.1.0
atlassian-bitbucket-server-integration-2.1.1
atlassian-bitbucket-server-integration-2.1.2
atlassian-bitbucket-server-integration-2.1.3
atlassian-bitbucket-server-integration-3.*
atlassian-bitbucket-server-integration-3.0.0
atlassian-bitbucket-server-integration-3.0.1
atlassian-bitbucket-server-integration-3.0.2
atlassian-bitbucket-server-integration-3.1.0
atlassian-bitbucket-server-integration-3.2.0
atlassian-bitbucket-server-integration-3.2.1
atlassian-bitbucket-server-integration-3.2.2
atlassian-bitbucket-server-integration-3.2.3
atlassian-bitbucket-server-integration-3.3.0
atlassian-bitbucket-server-integration-3.3.1
atlassian-bitbucket-server-integration-3.3.2
atlassian-bitbucket-server-integration-3.4.0
atlassian-bitbucket-server-integration-3.4.1
atlassian-bitbucket-server-integration-3.4.2
atlassian-bitbucket-server-integration-3.5.0
atlassian-bitbucket-server-integration-3.6.0
atlassian-bitbucket-server-integration-4.*
atlassian-bitbucket-server-integration-4.0.0
atlassian-bitbucket-server-integration-4.1.0
atlassian-bitbucket-server-integration-4.1.2
atlassian-bitbucket-server-integration-4.1.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-24398.json"