Jenkins Publish to Bitbucket Plugin Cross-Site Request Forgery Vulnerability

A cross-site request forgery (CSRF) vulnerability exists in the Jenkins Publish to Bitbucket Plugin, specifically in versions through 0.4. This vulnerability allows attackers to connect to a URL of their choice using credentials IDs that can be obtained through other means, potentially capturing sensitive credentials stored in Jenkins.

Impact

Exploitation of this vulnerability could lead to unauthorized access to credentials stored in Jenkins, allowing attackers to impersonate users or access restricted resources.