Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
atlassian9c941f86b120BSERV-19299
HistoryMar 13, 2024 - 3:04 p.m.

Bitbucket is affected by CVE-2024-22243

2024-03-1315:04:41
9c941f86b120
jira.atlassian.com
54
bitbucket
cve-2024-22243
security
vulnerability
software

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

JSON

h3. Issue Summary
Bitbucket is affected by [CVE-2024-22243|https://nvd.nist.gov/vuln/detail/CVE-2024-22243].
h3. Steps to Reproduce
N/A
h3. Expected Results
N/A
h3. Actual Results
N/A
h3. Workaround
Currently, there is no known workaround for this behaviour. A workaround will be added here when available.

Related

prion 1
redhatcve 1
veracode 1
debiancve 3
cgr 1
osv 3
github 3
atlassian 4
openvas 8
f5 1
cvelist 3
nessus 1
cve 3
ubuntucve 3
ibm 11
githubexploit 1
wolfi 1
hackerone 1
redhat 1
oracle 1
prion
prion
Open redirect
2024-02-23 05:15:00
redhatcve
redhatcve
CVE-2024-22243
2024-02-23 21:31:38
veracode
veracode
Server Side Request Forgery (SSRF)
2024-02-26 05:35:16
debiancve
debiancve
CVE-2024-22243
2024-02-23 05:15:08
CVE-2024-22259
2024-03-16 05:15:20
CVE-2024-22262
2024-04-16 06:15:46
cgr
cgr
CVE-2024-22243 vulnerabilities
2024-05-19 03:07:16
osv
osv
Spring Web vulnerable to Open Redirect or Server Side Request Forgery
2024-02-23 06:30:31
Spring Framework URL Parsing with Host Validation Vulnerability
2024-03-16 06:30:27
Spring Framework URL Parsing with Host Validation
2024-04-16 06:30:28
github
github
Spring Web vulnerable to Open Redirect or Server Side Request Forgery
2024-02-23 06:30:31
Spring Framework URL Parsing with Host Validation Vulnerability
2024-03-16 06:30:27
Spring Framework URL Parsing with Host Validation
2024-04-16 06:30:28
atlassian
atlassian
SSRF (Server-Side Request Forgery) org.springframework:spring-web Dependency in Bamboo Data Center and Server
2024-04-11 08:11:41
Jira - CVE-2024-22243
2024-03-21 18:45:13
SSRF (Server-Side Request Forgery) org.springframework:spring-web Dependency in Bamboo Data Center and Server
2024-04-12 01:11:10
openvas
openvas
VMware Spring Framework < 5.3.32, 6.0.x < 6.0.17, 6.1.x < 6.1.4 Open Redirect / SSRF Vulnerability - Windows
2024-02-22 00:00:00
VMware Spring Framework < 5.3.32, 6.0.x < 6.0.17, 6.1.x < 6.1.4 Open Redirect / SSRF Vulnerability - Linux
2024-02-22 00:00:00
VMware Spring Boot < 2.7.20.1, 3.0.x < 3.0.15.1, 3.1.x < 3.1.10, 3.2.x < 3.2.4 SSRF Vulnerability - Windows
2024-03-18 00:00:00
f5
f5
K000139218 : CVE-2024-22243 Spring Framework vulnerability
2024-04-09 00:00:00
cvelist
cvelist
CVE-2024-22243 CVE-2024-22243: Spring Framework URL Parsing with Host Validation
2024-02-23 05:03:54
CVE-2024-22259 CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)
2024-03-16 04:40:08
CVE-2024-22262 CVE-2024-22262: Spring Framework URL Parsing with Host Validation
2024-04-16 05:54:12
nessus
nessus
Oracle Primavera Unifier Open Redirect (April 2024 CPU)
2024-04-17 00:00:00
cve
cve
CVE-2024-22243
2024-02-23 05:15:08
CVE-2024-22259
2024-03-16 05:15:20
CVE-2024-22262
2024-04-16 06:15:46
ubuntucve
ubuntucve
CVE-2024-22243
2024-02-23 00:00:00
CVE-2024-22259
2024-03-16 00:00:00
CVE-2024-22262
2024-04-16 00:00:00
ibm
ibm
Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to phishing attacks in VMware Tanzu Spring Framework [CVE-2024-22243]
2024-04-25 18:19:15
Security Bulletin: Vulnerability in Spring Framework affects IBM Tivoli Application Dependency Discovery Manager (CVE-2024-22259, CVE-2024-22243, CVE-2024-22262).
2024-05-23 15:35:34
Security Bulletin: IBM Observability with Instana for Synthetic PoP is affected by Multiple Security Vulnerabilities
2024-04-18 13:43:00
githubexploit
githubexploit
Exploit for CVE-2024-22243
2024-02-21 12:55:22
wolfi
wolfi
CVE-2024-22243 vulnerabilities
2024-06-01 21:07:39
hackerone
hackerone
curl: Incorrect Type Conversion in interpreting IPv4-mapped IPv6 addresses and below `curl` results in indeterminate SSRF vulnerabilities.
2024-05-07 15:11:55
redhat
redhat
(RHSA-2024:3354) Important: Red Hat Fuse 7.13.0 release and security update
2024-05-23 22:44:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

8.7%

JSON
Related for BSERV-19299
prion1redhatcve1veracode1debiancve3cgr1osv3github3atlassian4openvas8f51cvelist3nessus1cve3ubuntucve3ibm11githubexploit1wolfi1hackerone1redhat1oracle1