https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T01:18:16.548807+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-322053 EUVD-2026-322053 2026-10-09T01:18:16.551667+00:00 EUVD-2026-322053 https://cve.radiocsirt.org/vuln/fkie_cve-2026-48924 fkie_cve-2026-48924 2026-10-09T01:18:16.551699+00:00

Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.

 https://cve.radiocsirt.org/vuln/ghsa-r8fj-rff6-f7h5 GHSA-r8fj-rff6-f7h5 — Jenkins Bitbucket OAuth Plugin does not restrict the redirect URL after login 2026-10-09T01:18:16.551730+00:00

Affected: Maven: org.jenkins-ci.plugins:bitbucket-oauth

Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login.

This allows attackers to perform phishing attacks by having users go to a Jenkins URL that will forward them to a different site after successful authentication.

Bitbucket OAuth Plugin 0.18 only redirects to relative (Jenkins) URLs.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-1707 WID-SEC-W-2026-1707 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-09T01:18:16.551757+00:00

Ein Angreifer kann mehrere Schwachstellen in Jenkins Plugins ausnutzen, um Informationen offenzulegen, um Dateien zu manipulieren, um einen Cross-Site Scripting Angriff durchzuführen, um beliebigen Programmcode auszuführen, und um Sicherheitsvorkehrungen zu umgehen.