CVE-2025-24398
1 advisory.
Maven/io.jenkins.plugins:atlassian-bitbucket-server-integration CVE-2025-24398: high 8.8
Bitbucket Server Integration Plugin allows bypassing CSRF protection for any URL
Action: Upgrade io.jenkins.plugins:atlassian-bitbucket-server-integration to 4.1.4 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 2.1.0 | 4.1.4 | - |
Fixed versions
| 4.1.4 |
Sources
- osv: GHSA-qjw6-xvrm-5f2h
- https://nvd.nist.gov/vuln/detail/CVE-2025-24398
- https://github.com/jenkinsci/atlassian-bitbucket-server-integration-plugin
- https://www.jenkins.io/security/advisory/2025-01-22/#SECURITY-3434
CVE-2025-24398 · published · modified · JSON