Threats tagged 'ghsa-4p5c-28rj-gq4p'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.2	EPSS 0.1%	CVE-2026-92138Jenkins Bitbucket Server Integration Plugin · CWE-345 Medium4.2EPSS 0.1%2026-09-16CVE Database V5CVE-2026-92138 The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the `oauth_callback` URL from the submitted form rather than from the server-side stored request token, allowing attackers to hijack the OAuth flow and obtain an access token on behalf of the victim. EPSS 0.1%Vulnerability Jenkins Project CWE-345 #ghsa-4p5c-28rj-gq4p	CVE Database V5	2026-09-16

Page 1 of 1