CVE-2020-36233

概要

参考情報

• jira.atlassian.com/browse/BSERV-12753 · Issue Tracking
• kb.cert.org/vuls/id/240785 · Third Party Advisory

bitbucket のその他の脆弱性

• CVE-2022-43781緊急 9.8There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to c…
• CVE-2022-36804高 8.8悪用確認済み（CISA KEV）Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10,…
• CVE-2022-26137高 8.8A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked w…
• CVE-2022-26136緊急 9.8A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third p…
• CVE-2020-14171中 6.5Atlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to intercept unencrypted repository import reques…