Jenkins Project Jenkins Bitbucket Push And Pull Request Plugin
3 CVEs affecting Jenkins Project Jenkins Bitbucket Push And Pull Request Plugin. Latest disclosed: 2026-09-16. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-41937 | High | 7.5 | 2023-09-06 | Jenkins Bitbucket Push and Pull Request Plugin 2.4.0 through 2.8.3 (both inclusive) trusts values provided in the webhook payload, including certain URLs, and… |
CVE-2026-92139 | Medium | 6.5 | 2026-09-16 | Jenkins Bitbucket Push and Pull Request Plugin 4.0.1 and earlier trusts values provided in the webhook payload, including certain URLs, and uses configured Bit… |
CVE-2026-57289 | Medium | 4.8 | 2026-06-24 | Jenkins Bitbucket Push and Pull Request Plugin 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostname validation for connections sending B… |