CVE-2026-48924

CVSS Score & Metrics

Base Score

4.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N                                    

Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.

Published Date

May 27, 2026

Last Modified

May 28, 2026

CWE ID

CWE-601

Source

NVD

Vendor

Jenkins Project

Product

Jenkins Bitbucket OAuth Plugin