CVE-2025-64149

score

<0.1

cvss

5.4

epss

0.2%

published

2025-10-29

kev added

—

first seen

2026-10-21

Jenkins Publish to Bitbucket Plugin <= 0.4 contains a cross-site request forgery caused by lack of request validation, letting attackers connect to attacker-specified URLs using stolen credentials, exploit requires attacker to obtain credentials IDs by other means.