Vulnerabilidades do Atlassian Bitbucket

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Atlassian Bitbucket: 1 registro(s), com versões afetadas e correções.
cpe:2.3:a:atlassian:bitbucket

CVE-2022-36804 Alta · 8.8 KEV Urgente · 76 Exploit público CWE-78 25/08/2022

Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8.0.0 before version 8.0.3, from version 8.1.0 before version 8.1.3, and from version 8.2.0 before version 8.2.2, and from version 8.3.0 before 8.3.1 allows remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request. This vulnerability was reported via our Bug Bounty Program by TheGrandPew.