Miggo at BlackHat 2026!
Easily map the attack path and prioritize which CVEs are a threat to your organization
Miggo AIGenerate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.jenkins-ci.plugins:bitbucket-oauth | maven | <= 0.17 | 0.18 |
Miggo AIRoot Cause AnalysisThe vulnerability lies in the doFinishLogin method within the BitbucketSecurityRealm class. The initial analysis involved identifying the code changes between the vulnerable version (0.17) and the patched version (0.18) of the bitbucket-oauth-plugin. By comparing the git tags for these versions, a security patch commit with the message '[SECURITY-3761]' was identified. The diff of this commit clearly shows that the doFinishLogin method was modified. The vulnerable code performed an unsafe redirect to the 'referer' URL. The patch introduced validation to ensure that the redirect URL is a safe, relative Jenkins URL, thus mitigating the open redirect vulnerability. Therefore, the doFinishLogin function is the exact location of the vulnerability.
