GET DEMO
Back
GET DEMO
KEEPNET LABS > Blog > Critical Atlassian Bitbucket Server and Data Center Flaw Let Attackers Execute Malicious Code

Critical Atlassian Bitbucket Server and Data Center Flaw Let Attackers Execute Malicious Code

Atlassian has identified a critical vulnerability in the security system of the Bitbucket server and data center. Vulnerability allows attackers to execute malicious code on the affected instances.

Critical Atlassian Bitbucket Server and Data Center Flaw Let Attackers Execute Malicious Code

Atlassian has identified a critical vulnerability in the security system of the Bitbucket server and data center, which allowed attackers to execute malicious code on the affected instances. The critical error (CVE-2022-36804) is tracked as a command implementation vulnerability that exists at multiple endpoints of the Bitbucket server and the data center’s API.

Bitbucket is a Git-based source code repository hosting service owned by Atlassian. Bitbucket offers both commercial plans and free accounts with an unlimited number of private repositories. Bitbucket Server and Data Center-command injection vulnerability received the severity rating of CVSS 9.9. Severity levels According to a scale published in Atlassian, the severity of this vulnerability is “critical”.

According to the Atlassian council, “An attacker who has access to a public repository or has reading rights on a private Bitbucket repository can execute arbitrary code. by sending a malicious HTTP request,”. all versions released after 6.10.17, including 7.0, are affected. 0 and above, this means that there are all instances running from version 7.0. from 0 to 8.3. 0% are affected by this vulnerability. In addition, the company claims that there are users who access Bitbucket through bitbucket söylüyor.org the domain is hosted by Atlassian, and users are not affected by this vulnerability. Fixed Versions Are Being Updated Now

Keepnet Labs’ Threat Sharing Module: How to identify attackers in reconnaissance stage

Fewer and fewer businesses can protect themselves and the sensitive data under their control as a result of the rapid pace of digitalization, increased attack surfaces, and variety of vulnerabilities and attack methodologies. To stop the attacks, several successful and effective recent cyberattacks brought up the question of sharing threat intelligence once more. The government […]

The last hunt of social engineering: Uber

“Hi @here I announce I am a hacker and Uber has suffered a data breach” was the message that appeared in a channel on Uber’s Slack. After the message, the ride-share giant confirmed that it was responding to “a cybersecurity incident” in cooperation with law enforcement. An 18-year-old hacker reportedly took responsibility for the attack […]

Black Hat Fireside Chat: Deploying ‘AI’ as a weapon to win the ‘attack surface management’ war

An advanced weapon is emerging that uses data analysis to hone systems and suppress attacks. Darktrace's artificial intelligence solutions can help companies restrict access to APIs, neutralize shady IT, protect supply chains and even improve the efficiency of DEVSECOPYRIGHTs.

Join
Our Newsletter

Sign up to learn about the latest threats, hacking methods, and news.