EUVD-2026-80762
GHSA-4p5c-28rj-gq4p
Severity by source
AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Remote but unauthenticated attacker (PR:N) must win an in-progress OAuth flow (AC:H) and get the victim to authorize (UI:R); a stolen scoped token yields only C:L/I:L, no availability impact.
Primary rating from Vendor (jenkins).
CVSS VectorVendor: jenkins
Lifecycle Timeline
3DescriptionCVE.org
The OAuth authorization endpoint in Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier reads the oauth_callback URL from the submitted form rather than from the server-side stored request token, allowing attackers to hijack the OAuth flow and obtain an access token on behalf of the victim.
AnalysisAI
OAuth flow hijacking in the Jenkins Bitbucket Server Integration Plugin 6.0.1 and earlier allows an attacker to substitute the callback URL used in the plugin's OAuth authorization step and capture the Bitbucket access token issued to a victim. Exploitation is not against a static endpoint: the plugin must be installed with its OAuth authorization flow in active use, the attacker must have an OAuth handshake in progress, and a victim who is already authenticated must complete the authorization step (UI:R) within a timing window the attacker must hit (AC:H). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Requires the Jenkins Bitbucket Server Integration Plugin (≤6.0.1) to be installed and its OAuth authorization flow in active use. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | This is a genuinely low-priority issue despite being a real authentication-flow flaw. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Patch status: Patch available per vendor advisory; the exact fixed version is not specified in the available data, so consult the Jenkins Security Advisory 2026-09-16, section SECURITY-3778 (https://www.jenkins.io/security/advisory/2026-09-16/#SECURITY-3778) for the released version and upgrade the Jenkins Bitbucket Server Integration Plugin to that release immediately thereafter. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Information Disclosure
View allShare
External POC / Exploit Code
Leaving vuln.today