CVE Watch—

CVE-2022-36804

Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

99.1%

p100

KEV

SIM

30 de set. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.1%EPSS · 30 dias99.2%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

Atlassian / Bitbucket Server and Data Center

Vulnerabilidade

Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

Adicionado ao KEV

30 de set. de 2022

Corrigir até

21 de out. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with access to a public Bitbucket repository, or with read permissions to a private one, can execute code by sending a malicious HTTP request.

Ação necessária

Apply updates per vendor instructions.

Notas

https://jira.atlassian.com/browse/BSERV-13438; https://nvd.nist.gov/vuln/detail/CVE-2022-36804

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.