SSL/TLS certificate validation unconditionally disabled by bitbucket-push-and-pull-request

bitbucket-push-and-pull-request 3.3.8 and earlier unconditionally disables SSL/TLS certificate and hostname validation for the connections it makes to Bitbucket Server using Bearer token authentication. Because the Bearer token is transmitted in these requests, this allows attackers able to...

EUVD-2020-20113

Malware in sbrugna...