All CVE records
CVE-2022-36804 — Atlassian Bitbucket Server and Data Center Command Injection Vulnerability
CISA KEV listed
Added September 30, 2022 Remediate by October 21, 2022
Description
Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with access to a public Bitbucket repository, or with read permissions to a private one, can execute code by sending a malicious HTTP request.
Required action
Apply updates per vendor instructions.
Notes
https://jira.atlassian.com/browse/BSERV-13438; https://nvd.nist.gov/vuln/detail/CVE-2022-36804
Need help remediating this vulnerability?
Our team helps organizations patch, mitigate, and respond to CISA KEV advisories fast.