CVE-2022-36804

Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

Bitbucket

Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8.0.0 before version 8.0.3, from version 8.1.0 before version 8.1.3, and from version 8.2.0 before version 8.2.2, and from version 8.3.0 before 8.3.1 allows remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a…

25. Aug 2022

Ausgewertete Quellen

• Hersteller
  https://jira.atlassian.com/browse/BSERV-13438
• Hinweis
  http://packetstormsecurity.com/files/168470/Bitbucket-Git-Command-Injection.html
• Hinweis
  http://packetstormsecurity.com/files/171453/Bitbucket-7.0.0-Remote-Command-Execution.html
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-36804
• CISA
  Atlassian Bitbucket Server and Data Center Command Injection Vulnerability
• NVD
  CVE-2022-36804