Disclosure summary
Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with access to a public Bitbucket repository, or with read permissions to a private one, can execute code by sending a malicious HTTP request.
CISA remediation guidance
Apply updates per vendor instructions.
Original records & references
PUBLISHED 2022-09-30T00:00:00-04:00
MODIFIED 2022-09-30T00:00:00-04:00
INGESTED 2026-10-06T11:42:58-04:00