CVE-2017-16857

🗓️ 05 Dec 2017 16:00:00Reported by atlassianType

CVE-2017-16857 - Bypass Bitbucket auto-unapprove plugin via minimal brute-forc

Reporter	Title	Published	Views	Family All 6
CNVD	Atlassian auto-unapprove plugin security bypass vulnerability	13 Dec 201700:00	–	cnvd
Cvelist	CVE-2017-16857	5 Dec 201716:00	–	cvelist
EUVD	EUVD-2017-8031	7 Oct 202500:30	–	euvd
NVD	CVE-2017-16857	5 Dec 201716:29	–	nvd
OSV	CVE-2017-16857	5 Dec 201716:29	–	osv
Prion	Design/Logic Flaw	5 Dec 201716:29	–	prion

NVD

Node

atlassian bitbucket_auto_unapprove_pluginMatch1.0.0

atlassian bitbucket_auto_unapprove_pluginMatch1.0.0beta1

atlassian bitbucket_auto_unapprove_pluginMatch1.1.0

atlassian bitbucket_auto_unapprove_pluginMatch1.2.0

atlassian bitbucket_auto_unapprove_pluginMatch2.0.1

atlassian bitbucket_auto_unapprove_pluginMatch2.0.2

atlassian bitbucket_auto_unapprove_pluginMatch2.0.4

atlassian bitbucket_auto_unapprove_pluginMatch2.1.1

atlassian bitbucket_auto_unapprove_pluginMatch2.1.3

atlassian bitbucket_auto_unapprove_pluginMatch2.2.0

atlassian bitbucket_auto_unapprove_pluginMatch3.0.0

[
  {
    "product": "Auto-Unapprove Plugin (for Bitbucket Server)",
    "vendor": "Atlassian",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to version 3.0.1"
      }
    ]
  }
]

Source	Link
jira	www.jira.atlassian.com/browse/BSERV-10439

13 May 2026 00:24Current

8.4High risk

Vulners AI Score8.4

CVSS 26

CVSS 38.5

EPSS0.00274

CWE-362