Junglewise Threat Intelligence

CVE-2025-24398: Bitbucket Server Integration Plugin allows bypassing CSRF protection for any URL

CVE-2025-24398 · Severity: low · CVSS 3.1 · Published 2025-01-22

Technologies: io.jenkins.plugins:atlassian-bitbucket-server-integration (Maven). Vendors: Maven.

Executive brief

Bitbucket Server Integration Plugin allows bypassing CSRF protection for any URL

Affected products

  • Maven io.jenkins.plugins:atlassian-bitbucket-server-integration

Related threats