Threat intelligence / Vulnerability
CVE-2022-36804
Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with access to a public Bitbucket repository, or with read permissions to a private one, can execute code by sending a malicious HTTP request.
Vulnerability
TypeVulnerability
External ID—
First seen2022-09-30
Last seen2022-09-30
Confidence
—
Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with access to a public Bitbucket repository, or with read permissions to a private one, can execute code by sending a malicious HTTP request.
Labels
CISA KEV context
Vendor / productAtlassian Bitbucket Server and Data Center
Added2022-09-30
Due date2022-10-21
12 recorded
Relationships
4 external