GitHub Advisoryadvisory · Maven

GHSA-vrpg-c7c4-8mpx SSRF vulnerability in Jenkins Bitbucket Push and Pull Request Plugin allows capturing credentials

HIGH Published 2023-09-06 Modified 2024-01-30 Official page ↗
Aliases
CVE-2023-41937
Ecosystem
Maven
Packages
io.jenkins.plugins:bitbucket-push-and-pull-request
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-918
Reviewed
2024-01-30

Affected packages

• Maven io.jenkins.plugins:bitbucket-push-and-pull-request: >= 2.4.0, < 2.8.4 → fixed in 2.8.4

Description

Jenkins Bitbucket Push and Pull Request Plugin 2.4.0 through 2.8.3 (both inclusive) trusts values provided in the webhook payload, including certain URLs, and uses configured Bitbucket credentials to connect to those URLs, allowing attackers to capture Bitbucket credentials stored in Jenkins by sending a crafted webhook payload.

Related

Alias · CVE (1)

  • CVE-2023-41937 Jenkins Bitbucket Push and Pull Request Plugin 2.4.0 through 2.8.3 (both inclusive) trusts values provided in the webhook payload,… vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References