Critical severity9.8NVD Advisory· Published Jan 26, 2023· Updated Jun 17, 2026
CVE-2023-24427
CVE-2023-24427
Description
Jenkins Bitbucket OAuth Plugin 0.12 and earlier does not invalidate the previous session on login.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.jenkins-ci.plugins:bitbucket-oauthMaven | < 0.13 | 0.13 |
Affected products
3cpe:2.3:a:jenkins:bitbucket_oauth:*:*:*:*:*:jenkins:*:*+ 1 more
- cpe:2.3:a:jenkins:bitbucket_oauth:*:*:*:*:*:jenkins:*:*range: <=0.13
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
4News mentions
1- Jenkins Security Advisory 2023-01-24Jenkins Security Advisories · Jan 24, 2023