CVE-2022-36804

CVE-2022-36804 Bitbucket RCE 2022 Ce dépôt fait partie du hgrab-framework dork title: "Public Repositories - Bitbucket" Produit affecté - Bitbucket Server and Data Center 7.6 avant 7.6.17 - Bitbucket Server and Data Center 7.17 avant 7.17.10 - Bitbucket Server and Data Center 7.21 avant 7.21.4 -...

cve-2022-36804

CVE-2022-36804 : RCE pré-authentification dans Atlassian Bitbucket Server Une vulnérabilité critique d'injection de commandes a été trouvée dans plusieurs points de terminaison API de l'Atlassian Bit bucket Server et Data center. Cette vulnérabilité affecte toutes les versions de Bitbucket Server...

CVE-2022-36804-MASS-RCE

CVE-2022-36804-POC Критическая уязвимость CVE-2022-36804 в Atlassian Bitbucket Server и Data Center может быть использована неавторизованными злоумышленниками для выполнения вредоносного кода на уязвимых экземплярах. затронутые версии Все версии Bitbucket Server и Data Center, выпущенные до верси...

GHSA-C36C-CF6R-GHGJ Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates

Impact Deployments using event-driven updates in the Bitbucket Server catalog provider may ingest catalog locations from repositories that are excluded by the provider's configured project, repository, or archived-repository filters. An authenticated Bitbucket Server user who can push to a...

EUVD-2026-93992

Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates...

Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates

Impact Deployments using event-driven updates in the Bitbucket Server catalog provider may ingest catalog locations from repositories that are excluded by the provider's configured project, repository, or archived-repository filters. An authenticated Bitbucket Server user who can push to a...

EUVD-2026-94003

Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions...

CVE-2026-106486

Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder actions did not sufficiently validate...

CVE-2026-106458

Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsistent repository filtering in bitbucket server catalog event updates. Deployments using event-driven updates in the...

CVE-2026-106486 Backstage: Improper filesystem validation in Bitbucket pull-request scaffolder actions

Backstage is an open framework for building developer portals. Prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-module-bitbucket-server, the Bitbucket pull-request Scaffolder actions did not sufficiently validate...

CVE-2026-106486

The Backstage framework contains a vulnerability in its Bitbucket pull-request Scaffolder actions due to improper filesystem path validation . Specifically, versions prior to 0.3.10 in @backstage/plugin-scaffolder-backend-module-bitbucket-cloud and 0.2.25 in @backstage/plugin-scaffolder-backend-m...

CVE-2026-106458 Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates

Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsistent repository filtering in bitbucket server catalog event updates. Deployments using event-driven updates in the...

CVE-2026-106458 Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates

Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsistent repository filtering in bitbucket server catalog event updates. Deployments using event-driven updates in the...

CVE-2026-106458

The Backstage framework affects the @backstage/plugin-catalog-backend-module-bitbucket-server package in versions 0.4.0 through 0.5.15 . The vulnerability stems from inconsistent repository filtering during Bitbucket Server catalog event updates. Specifically, deployments using event-driven updat...

CVE-2026-106458 Backstage: Inconsistent repository filtering in Bitbucket Server catalog event updates

Backstage is an open framework for building developer portals. From 0.4.0 until 0.5.15, the @backstage/plugin-catalog-backend-module-bitbucket-server package is affected by inconsistent repository filtering in bitbucket server catalog event updates. Deployments using event-driven updates in the...

cve-2022-36804

CVE-2022-36804 Bitbucket PoC Ce dépôt contient un script d'exploitation en Python pour la vulnérabilité CVE-2022-36804 d'Atlassian Bitbucket Server/Data Center. Le problème est une faille d'injection de commandes dans le flux d'archive Git, où des paramètres prefix spécialement conçus peuvent êtr...

PT-2026-107267

Name of the Vulnerable Software and Affected Versions @backstage/plugin-scaffolder-backend-module-bitbucket-cloud versions prior to 0.3.10 @backstage/plugin-scaffolder-backend-module-bitbucket-server versions prior to 0.2.25 Description Bitbucket pull-request Scaffolder actions fail to sufficient...

PT-2026-107247

Name of the Vulnerable Software and Affected Versions @backstage/plugin-catalog-backend-module-bitbucket-server versions 0.4.0 through 0.5.14 Description Inconsistent repository filtering occurs during Bitbucket Server catalog event updates. Deployments utilizing event-driven updates may ingest...

CVE-2022-36804

CVE-2022-36804 Les composants Bitbucket Server et Bitbucket Data Center présentent une vulnérabilité d'injection de commandes, selon des informations récemment découvertes par l'équipe de sécurité de Sangfor. Un attaquant peut soumettre des requêtes HTTP malveillantes pour exécuter du code...

CVE-2022-36804

CVE-2022-36804 PoC Ce dépôt contient un simple exploit de preuve de concept pour la vulnérabilité d'exécution de code à distance BitBucket CVE-2022-36804. L'exploitation de cette vulnérabilité nécessite un accès à un dépôt sur l'instance cible ; si vous n'avez pas d'identifiants, la cible devra...