Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-75365

Build Now action in Bitbucket couldn't be initiated

XMLWordPrintable

      The build now action in Bitbucket (see below) can't be initiated in Bitbucket Server Integration Plugin 4.1.4.

      I believe this is because version 4.1.4 fixes Jenkins Security Advisory 2025-01-22. However, CSRF protection is not disabled for this URL.

      Jenkins responds with the following:


      Bitbucket doesn't have access to the crumb generated by Jenkins in the Jenkins user's session and therefore can't provide it in the Jenkins-Crumb header.

      Rolling back the plugin to version 4.1.3 fixes this issue, but doesn't include the security fixes from 4.1.4

        1. Screenshot 2025-03-04 150425.png
          Screenshot 2025-03-04 150425.png
          6 kB
        2. Screenshot 2025-03-04 150326.png
          Screenshot 2025-03-04 150326.png
          8 kB
        3. Screenshot 2025-03-04 150953.png
          Screenshot 2025-03-04 150953.png
          60 kB

          [JENKINS-75365] Build Now action in Bitbucket couldn't be initiated

          Austin created issue -
          Austin made changes -
          Attachment Original: Screenshot 2025-03-04 150820.png [ 64044 ]
          Austin made changes -
          Priority Original: Minor [ 4 ] New: Major [ 3 ]
          Dyon made changes -
          Labels New: triaged

            Unassigned Unassigned
            aputland Austin
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated: