Atlassian Bitbucket 6.4.x < 6.4.3 Command Injection Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is prior to 5.16.10, 6.0.x prior to 6.0.10, 6.1.x prior to 6.1.8, 6.2.x prior to 6.2.6, 6.3.x prior to 6.3.5, 6.4.x prior to 6.4.3 or 6.5.x prior to 6.5.2. It is, therefore, affected by a...

Atlassian Bitbucket 6.0.x < 6.0.10 Command Injection Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is prior to 5.16.10, 6.0.x prior to 6.0.10, 6.1.x prior to 6.1.8, 6.2.x prior to 6.2.6, 6.3.x prior to 6.3.5, 6.4.x prior to 6.4.3 or 6.5.x prior to 6.5.2. It is, therefore, affected by a...

Atlassian Bitbucket 6.1.x < 6.1.8 Command Injection Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is prior to 5.16.10, 6.0.x prior to 6.0.10, 6.1.x prior to 6.1.8, 6.2.x prior to 6.2.6, 6.3.x prior to 6.3.5, 6.4.x prior to 6.4.3 or 6.5.x prior to 6.5.2. It is, therefore, affected by a...

Atlassian Bitbucket 6.3.x < 6.3.5 Command Injection Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is prior to 5.16.10, 6.0.x prior to 6.0.10, 6.1.x prior to 6.1.8, 6.2.x prior to 6.2.6, 6.3.x prior to 6.3.5, 6.4.x prior to 6.4.3 or 6.5.x prior to 6.5.2. It is, therefore, affected by a...

Atlassian Bitbucket 5.15.x < 5.15.3 Path Traversal Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is 5.13.x prior to 5.13.6, 5.14.x prior to 5.14.4, 5.15.x prior to 5.15.3, 5.16.x prior to 5.16.3, 6.0.x prior to 6.0.3 or 6.1.x prior to 6.1.2. It is, therefore, affected by a path...

Atlassian Bitbucket 5.16.x < 5.16.3 Path Traversal Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is 5.13.x prior to 5.13.6, 5.14.x prior to 5.14.4, 5.15.x prior to 5.15.3, 5.16.x prior to 5.16.3, 6.0.x prior to 6.0.3 or 6.1.x prior to 6.1.2. It is, therefore, affected by a path...

Atlassian Bitbucket 6.0.x < 6.0.3 Path Traversal Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is 5.13.x prior to 5.13.6, 5.14.x prior to 5.14.4, 5.15.x prior to 5.15.3, 5.16.x prior to 5.16.3, 6.0.x prior to 6.0.3 or 6.1.x prior to 6.1.2. It is, therefore, affected by a path...

Atlassian Bitbucket 5.13.x < 5.13.6 Path Traversal Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is 5.13.x prior to 5.13.6, 5.14.x prior to 5.14.4, 5.15.x prior to 5.15.3, 5.16.x prior to 5.16.3, 6.0.x prior to 6.0.3 or 6.1.x prior to 6.1.2. It is, therefore, affected by a path...

Atlassian Bitbucket 6.2.x < 6.2.6 Command Injection Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is prior to 5.16.10, 6.0.x prior to 6.0.10, 6.1.x prior to 6.1.8, 6.2.x prior to 6.2.6, 6.3.x prior to 6.3.5, 6.4.x prior to 6.4.3 or 6.5.x prior to 6.5.2. It is, therefore, affected by a...

Atlassian Bitbucket < 5.16.10 Command Injection Vulnerability

According to its self-reported version number, the Atlassian Bitbucket application running on the remote host is prior to 5.16.10, 6.0.x prior to 6.0.10, 6.1.x prior to 6.1.8, 6.2.x prior to 6.2.6, 6.3.x prior to 6.3.5, 6.4.x prior to 6.4.3 or 6.5.x prior to 6.5.2. It is, therefore, affected by a...

CVE-2019-15000

The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 the fixed version for 5.16.x , from 6.0.0 before 6.0.10 the fixed version for 6.0.x, from 6.1.0 before 6.1.8 the fixed version for 6.1.x, from 6.2.0 before 6.2.6 the fixed version for 6.2.x, from 6.3.0 before 6.3.5 t...

Command injection

The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 the fixed version for 5.16.x , from 6.0.0 before 6.0.10 the fixed version for 6.0.x, from 6.1.0 before 6.1.8 the fixed version for 6.1.x, from 6.2.0 before 6.2.6 the fixed version for 6.2.x, from 6.3.0 before 6.3.5 t...

CVE-2019-15000

The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 the fixed version for 5.16.x , from 6.0.0 before 6.0.10 the fixed version for 6.0.x, from 6.1.0 before 6.1.8 the fixed version for 6.1.x, from 6.2.0 before 6.2.6 the fixed version for 6.2.x, from 6.3.0 before 6.3.5 t...

CVE-2019-15000

The CVE-2019-15000 issue affects Bitbucket Server/Data Center via the commit-diff REST endpoint. The vulnerability allows anonymous code execution and reading of arbitrary files when a project/repository is publicly accessible and a user has repo access. Affected versions include Bitbucket Server...

PT-2019-13926

Name of the Vulnerable Software and Affected Versions Bitbucket Server and Data Center versions prior to 5.16.10 Bitbucket Server and Data Center versions 6.0.0 through 6.0.9 Bitbucket Server and Data Center versions 6.1.0 through 6.1.7 Bitbucket Server and Data Center versions 6.2.0 through 6.2....

CVE-2019-15000: Improper Neutralization of Special Elements used in an OS Command

The commit diff rest endpoint in Bitbucket Server and Data Center before 5.16.10 the fixed version for 5.16.x , from 6.0.0 before 6.0.10 the fixed version for 6.0.x, from 6.1.0 before 6.1.8 the fixed version for 6.1.x, from 6.2.0 before 6.2.6 the fixed version for 6.2.x, from 6.3.0 before 6.3.5 t...

Improper Authorization in Bitbucket Server through ATST Plugin - CVE-2019-15005

The Atlassian Troubleshooting and Support Tools ATST plugin prior to version 1.17.2 which was used in Bitbucket Server & Bitbucket Data Center before version 6.6.0, allows an unprivileged user to initiate periodic log scans and send the results to a user-specified email address due to a missing...

Improper Authorization in Bitbucket Server through ATST Plugin - CVE-2019-15005

The Atlassian Troubleshooting and Support Tools ATST plugin prior to version 1.17.2 which was used in Bitbucket Server & Bitbucket Data Center before version 6.6.0, allows an unprivileged user to initiate periodic log scans and send the results to a user-specified email address due to a missing...

CVE-2019-6788

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure issue 3 of 6. For installations using GitHub or Bitbucket OAuth integrations, it is possible to use a covert redirect to obtain the us...

CVE-2019-6788

An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. It allows Information Disclosure issue 3 of 6. For installations using GitHub or Bitbucket OAuth integrations, it is possible to use a covert redirect to obtain the us...