io.jenkins.plugins:atlassian-bitbucket-server-integration (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package io.jenkins.plugins:atlassian-bitbucket-server-integration, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2025-24398 — CVSS 8.8 (high): Jenkins Bitbucket Server Integration Plugin 2.1.0 through 4.1.3 (both inclusive) allows attackers to craft URLs that would bypass the CSRF…
• CVE-2022-28133 — CVSS 5.4 (medium): Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not limit URL schemes for callback URLs on OAuth consumers, resulting in…
• CVE-2022-28134 — CVSS 5.4 (medium): Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing…