Atlassia Alert
2341Warning Date
Severity Level
Warning Number
Target Sector
28 August, 2022
● Critical
2022-5171
All
Description:
Atlassian has released a security update to address several vulnerabilities in the following product:
- Bitbucket Server and Data Center
- All versions of Bitbucket Server and Datacenter released after 6.10.17 including 7.0.0 and newer are affected, this means that all instances that are running any versions between 7.0.0 and 8.3.0 inclusive are affected by this vulnerability.
Threats:
Attacker could exploit these vulnerabilities by doing the following:
- Command Injection
Best practice and Recommendations:
The CERT team encourages users to review Atlassian security advisory and apply the necessary update: