CVE-2023-41937
1 advisory.
Maven/io.jenkins.plugins:bitbucket-push-and-pull-request CVE-2023-41937: high 7.5, EPSS 0.68%
SSRF vulnerability in Jenkins Bitbucket Push and Pull Request Plugin allows capturing credentials
Action: Upgrade io.jenkins.plugins:bitbucket-push-and-pull-request to 2.8.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.4.0 | 2.8.4 | - |
Fixed versions
| 2.8.4 |
Sources
- osv: GHSA-vrpg-c7c4-8mpx
- https://nvd.nist.gov/vuln/detail/CVE-2023-41937
- https://www.jenkins.io/security/advisory/2023-09-06/#SECURITY-3165
- http://www.openwall.com/lists/oss-security/2023/09/06/9
CVE-2023-41937 · published · modified · JSON