VULNERABILITY INTELLIGENCE

CVE-2022-28134

CVSS score5.5 MEDIUM

EPSS probability0.67%

CISA KEVNot currently listed

Published2022-03-29

Last modified2026-06-17

Description

Jenkins Bitbucket Server Integration Plugin 3.1.0 and earlier does not perform permission checks in several HTTP endpoints, allowing attackers with Overall/Read permission to create, view, and delete BitBucket Server consumers.