Threats tagged 'ghsa-v549-7pm5-f8qr'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.3	EPSS 0.3%	CVE-2025-64148Org.jenkins ci.plugins:publish to bitbucket: Jenkins Publish to Bitbucket Plugin is missing a permissions check Medium4.3EPSS 0.3%2025-10-29GCVE DatabaseCVE-2025-64148 The Jenkins Publish to Bitbucket Plugin version 0.4 and earlier lacks a permission check in a form validation method. This flaw allows attackers with Overall/Read permission to enumerate credential IDs stored in Jenkins. These credential IDs could potentially be leveraged in conjunction with other vulnerabilities to capture credentials. No fix is currently available for this issue. EPSS 0.3%Report on CVE-2025-64148 Vulnerability CWE-862 #ghsa-v549-7pm5-f8qr #maven	GCVE Database	2025-10-29

Page 1 of 1