CVE-2023-41937

Summary

CVE-2023-41937 is a vulnerability affecting the Jenkins Bitbucket Push and Pull Request Plugin versions 2.4.0 to 2.8.3. Malicious actors can exploit this flaw by sending a specially crafted webhook payload to trick the plugin into trusting and connecting to malicious URLs. Once connected, attackers can gain unauthorized access to Bitbucket credentials stored within Jenkins, compromising the security of the targeted system.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.