Bitbucket Data Center - Path traversal in the migration tool leads to RCE - CVE-2019-3397

🗓️ 18 Apr 2019 01:28:10Reported by [email protected]Type

atlassian

atlassian🔗 jira.atlassian.com👁 121 Views

Bitbucket Data Center path traversal vulnerability - CVE-2019-339

Reporter	Title	Published	Views	Family All 17
zdt	Bitbucket Path Traversal / Remote Code Execution Vulnerability	24 May 201900:00	–	zdt
ATTACKERKB	Atlassian BitBucket Data Center Migration Tool Directory Traversal Vulnerability	3 Jun 201900:00	–	attackerkb
Tenable Nessus	Atlassian Bitbucket Data Center 5.13.x < 5.13.6 / 5.14.x < 5.14.4 / 5.15.x < 5.15.3 / 5.16.x < 5.16.3 / 6.0.x < 6.0.3 / 6.1.x < 6.1.2 Path Traversal Vulnerability (SA-2019-05-22)	22 Aug 201900:00	–	nessus
Tenable Nessus	Atlassian Bitbucket 5.13.x < 5.13.6 Path Traversal Vulnerability	11 Oct 201900:00	–	nessus
Tenable Nessus	Atlassian Bitbucket 5.14.x < 5.14.4 Path Traversal Vulnerability	11 Oct 201900:00	–	nessus
Tenable Nessus	Atlassian Bitbucket 5.15.x < 5.15.3 Path Traversal Vulnerability	11 Oct 201900:00	–	nessus
Tenable Nessus	Atlassian Bitbucket 5.16.x < 5.16.3 Path Traversal Vulnerability	11 Oct 201900:00	–	nessus
Tenable Nessus	Atlassian Bitbucket 6.0.x < 6.0.3 Path Traversal Vulnerability	11 Oct 201900:00	–	nessus
Tenable Nessus	Atlassian Bitbucket 6.1.x < 6.1.2 Path Traversal Vulnerability	11 Oct 201900:00	–	nessus
Atlassian	Bitbucket Data Center - Path traversal in the migration tool leads to RCE - CVE-2019-3397	18 Apr 201901:28	–	atlassian

17 Feb 2020 05:14Current

1.4Low risk

Vulners AI Score1.4

CVSS 29

CVSS 39.1

EPSS0.05057

bitbucket data center path traversal vulnerability rce cve-2019-3397 data center migration upgrade mitigation feature flag import functionality.