Severity
High
Analysis Summary
CVE-2022-36804
Atlassian Bitbucket Server and Data Center could allow a remote authenticated attacker to execute arbitrary commands on the system, caused by a flaw in multiple API endpoints. By sending a specially-crafted HTTP request, an attacker could exploit this vulnerability to execute arbitrary commands on the system.
Impact
- Buffer Overflow
Indicators Of Compromise
CVE
- CVE-2022-36804
Affected Vendors
Atlassian
Affected Products
- Atlassian Bitbucket Server and Data Center 7.0.0
- Atlassian Bitbucket Server and Data Center 8.3.0
Remediation
Refer to Atlassian Security Advisory for patch, upgrade or suggested workaround information.