https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T13:41:06.307033+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2025-02399 bdu:2025-02399 2026-10-03T13:41:06.375939+00:00 bdu:2025-02399 https://cve.radiocsirt.org/vuln/euvd-2026-211563 EUVD-2026-211563 2026-10-03T13:41:06.375975+00:00 EUVD-2026-211563 https://cve.radiocsirt.org/vuln/fkie_cve-2025-24398 fkie_cve-2025-24398 2026-10-03T13:41:06.375990+00:00

Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF protection of any target URL in Jenkins.

 https://cve.radiocsirt.org/vuln/ghsa-qjw6-xvrm-5f2h GHSA-qjw6-xvrm-5f2h — Bitbucket Server Integration Plugin allows bypassing CSRF protection for any URL 2026-10-03T13:41:06.376019+00:00

Affected: Maven: io.jenkins.plugins:atlassian-bitbucket-server-integration

An extension point in Jenkins allows selectively disabling cross-site request forgery (CSRF) protection for specific URLs. Bitbucket Server Integration Plugin implements this extension point to support OAuth 1.0 authentication.

In Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) this implementation is too permissive, allowing attackers to craft URLs that would bypass the CSRF protection of any target URL.

Bitbucket Server Integration Plugin 4.1.4 restricts which URLs it disables cross-site request forgery (CSRF) protection for to the URLs that needs it.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-0175 WID-SEC-W-2025-0175 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-03T13:41:06.376046+00:00

Ein entfernter anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um Informationen preiszugeben, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren oder erhöhte Rechte zu erlangen.