Medium severity4.3NVD Advisory· Published May 27, 2026· Updated May 28, 2026
CVE-2026-48924
CVE-2026-48924
Description
Jenkins Bitbucket OAuth Plugin 0.17 and earlier does not restrict the redirect URL after login, allowing attackers to perform phishing attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3<=0.17+ 2 more
- (no CPE)range: <=0.17
- cpe:2.3:a:jenkins:bitbucket_oauth:*:*:*:*:*:jenkins:*:*range: <=0.17
- (no CPE)range: <=0.17
Patches
Vulnerability mechanics
References
1- www.jenkins.io/security/advisory/2026-05-27/nvdVendor Advisory
News mentions
2- Jenkins Security Advisory: 13 CVEs Across 11 Plugins Disclosed May 2026Vypr Intelligence · May 27, 2026
- Jenkins Security Advisory 2026-05-27Jenkins Security Advisories · May 27, 2026