Threats tagged 'ghsa-767h-c3h2-x2j4'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	6.5	EPSS 0.2%	CVE-2026-92139Jenkins Bitbucket Push and Pull Request Plugin · Server-Side Request Forgery Medium6.5EPSS 0.2%2026-09-16CVE Database V5CVE-2026-92139 Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbucket credentials stored in Jenkins by sending a crafted webhook payload. EPSS 0.2%Vulnerability Jenkins Project CWE-918 #ghsa-767h-c3h2-x2j4	CVE Database V5	2026-09-16

Page 1 of 1