Threats tagged 'ghsa-wpr5-rc2j-99p2'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.2%	CVE-2025-64150Org.jenkins ci.plugins:publish to bitbucket: Jenkins Publish to Bitbucket Plugin is missing a permissions check Medium5.4EPSS 0.2%2025-10-29GCVE DatabaseCVE-2025-64150 The Jenkins Publish to Bitbucket Plugin version 0.4 and earlier lacks a permission check on an HTTP endpoint, allowing attackers with Overall/Read permission to misuse credentials stored in Jenkins. This endpoint also does not require POST requests, leading to a cross-site request forgery (CSRF) vulnerability. No fix is currently available for this issue. EPSS 0.2%Report on CVE-2025-64150 Vulnerability CWE-862 #ghsa-wpr5-rc2j-99p2 #maven	GCVE Database	2025-10-29

Page 1 of 1