{"id":"CVE-2024-39460","details":"Jenkins Bitbucket Branch Source Plugin 886.v44cf5e4ecec5 and earlier prints the Bitbucket OAuth access token as part of the Bitbucket URL in the build log in some cases.","aliases":["GHSA-x8mf-jcmf-r79f"],"modified":"2026-07-09T16:28:39.576568Z","published":"2024-06-26T17:15:27.180Z","references":[{"type":"ADVISORY","url":"https://www.jenkins.io/security/advisory/2024-06-26/#SECURITY-3363"},{"type":"ARTICLE","url":"http://www.openwall.com/lists/oss-security/2024/06/26/2"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/jenkinsci/bitbucket-branch-source-plugin","events":[{"introduced":"0"},{"last_affected":"44cf5e4ecec56e23d9c33d2a6c6632a4ff39da1b"}],"database_specific":{"cpe":"cpe:2.3:a:jenkins:bitbucket_branch_source:*:*:*:*:*:jenkins:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"886.v44cf5e4ecec5"}],"source":"CPE_RANGE"}}],"versions":["886.v44cf5e4ecec5","883.v041fa_695e9c2","880.vcf4056c5a_71f","878.v4a_79a_b_946282","877.vb_b_d5243f6794","848.v42c6a_317eda_e","876.v857269a_5f439","874.v659a_b_70f5e69","873.v0ed259216f8d","872.vb_8fa_89198661","871.v28d74e8b_4226","866.vdea_7dcd3008e","856.v04c46c86f911","845.v27a_d5823911b_","843.vd09104df7988","832.v43175a_425ea_6","825.va_6a_dc46a_f97d","820.v30b_e8c1e36f3","809.vc1d904b_30426","805.v7f97d29dc0f5","804.v8b_0642650b_d2","803.vd9c5e84c41fa_","800.va_b_b_9a_a_5035c1","796.v6cb_1559e1673","791.vb_eea_a_476405b","785.ve724eb_44e286","784.v7fcdc7c670f6","773.v4b_9b_005b_562b_","765.v5a_2d6a_23c01d","762.v969cfe087fc0","757.vddedc5f2589a_","756.v081ee2205040","751.vda_24678a_f781","746.v350d2781c184","723.vbabdf19eb4c7","737.vdf9dc06105be","734.v2f848c5e6ea2","731.v1f980b7eba32","726.vb0c1ea6c9336","cloudbees-bitbucket-branch-source-2.9.12","cloudbees-bitbucket-branch-source-2.9.11","cloudbees-bitbucket-branch-source-2.9.10","cloudbees-bitbucket-branch-source-2.9.9","cloudbees-bitbucket-branch-source-2.9.8","cloudbees-bitbucket-branch-source-2.9.7","cloudbees-bitbucket-branch-source-2.9.6","cloudbees-bitbucket-branch-source-2.9.5","cloudbees-bitbucket-branch-source-2.9.4","cloudbees-bitbucket-branch-source-2.9.3","cloudbees-bitbucket-branch-source-2.9.2","cloudbees-bitbucket-branch-source-2.9.1","cloudbees-bitbucket-branch-source-2.9.0","cloudbees-bitbucket-branch-source-2.8.0","cloudbees-bitbucket-branch-source-2.7.0","cloudbees-bitbucket-branch-source-2.6.0","cloudbees-bitbucket-branch-source-2.5.0","cloudbees-bitbucket-branch-source-2.4.6","cloudbees-bitbucket-branch-source-2.4.5","cloudbees-bitbucket-branch-source-2.4.4","cloudbees-bitbucket-branch-source-2.4.3","cloudbees-bitbucket-branch-source-2.4.2","cloudbees-bitbucket-branch-source-2.4.1","cloudbees-bitbucket-branch-source-2.4.0","cloudbees-bitbucket-branch-source-2.3.0","cloudbees-bitbucket-branch-source-2.2.16","cloudbees-bitbucket-branch-source-2.2.15","cloudbees-bitbucket-branch-source-2.2.14","cloudbees-bitbucket-branch-source-2.2.13","cloudbees-bitbucket-branch-source-2.2.12","cloudbees-bitbucket-branch-source-2.2.11","cloudbees-bitbucket-branch-source-2.2.10","cloudbees-bitbucket-branch-source-2.2.9","cloudbees-bitbucket-branch-source-2.2.8","cloudbees-bitbucket-branch-source-2.2.7","cloudbees-bitbucket-branch-source-2.2.6","cloudbees-bitbucket-branch-source-2.2.3","cloudbees-bitbucket-branch-source-2.2.5","cloudbees-bitbucket-branch-source-2.2.4","cloudbees-bitbucket-branch-source-2.2.2","cloudbees-bitbucket-branch-source-2.2.1","cloudbees-bitbucket-branch-source-2.2.0","cloudbees-bitbucket-branch-source-2.1.2","cloudbees-bitbucket-branch-source-2.1.1","cloudbees-bitbucket-branch-source-2.1.0","cloudbees-bitbucket-branch-source-2.0.2"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-39460.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"}]}