Description
Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with access to a public Bitbucket repository, or with read permissions to a private one, can execute code by sending a malicious HTTP request.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | >= 7.0.0, < unspecified | affected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | >= 7.18.0, < unspecified | affected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | >= 7.7.0, < unspecified | affected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | >= 8.0.0, < unspecified | affected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | >= 8.1.0, < unspecified | affected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | >= 8.2.0, < unspecified | affected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | >= 8.3.0, < unspecified | affected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | >= unspecified, < 8.3.1 | affected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | >= unspecified, < 7.6.17 | affected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | >= unspecified, < 7.17.10 | affected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | >= unspecified, < 7.21.4 | affected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | >= unspecified, < 8.0.3 | affected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | >= unspecified, < 8.1.3 | affected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | >= unspecified, < 8.2.2 | affected |
| Bitbucket Server | Atlassian / Bitbucket Server | >= 7.0.0, < unspecified | affected |
| Bitbucket Server | Atlassian / Bitbucket Server | >= 7.18.0, < unspecified | affected |
| Bitbucket Server | Atlassian / Bitbucket Server | >= 7.7.0, < unspecified | affected |
| Bitbucket Server | Atlassian / Bitbucket Server | >= 8.0.0, < unspecified | affected |
| Bitbucket Server | Atlassian / Bitbucket Server | >= 8.1.0, < unspecified | affected |
| Bitbucket Server | Atlassian / Bitbucket Server | >= 8.2.0, < unspecified | affected |
| Bitbucket Server | Atlassian / Bitbucket Server | >= 8.3.0, < unspecified | affected |
| Bitbucket Server | Atlassian / Bitbucket Server | >= unspecified, < 8.3.1 | affected |
| Bitbucket Server | Atlassian / Bitbucket Server | >= unspecified, < 7.17.10 | affected |
| Bitbucket Server | Atlassian / Bitbucket Server | >= unspecified, < 7.6.17 | affected |
| Bitbucket Server | Atlassian / Bitbucket Server | >= unspecified, < 7.21.4 | affected |
| Bitbucket Server | Atlassian / Bitbucket Server | >= unspecified, < 8.1.3 | affected |
| Bitbucket Server | Atlassian / Bitbucket Server | >= unspecified, < 8.2.2 | affected |
| Bitbucket Server | Atlassian / Bitbucket Server | >= unspecified, < 8.0.3 | affected |