Remote Code Execution Risk in Bitbucket Server and Data Center by Atlassian
CVE-2019-15010
Key Information:
- Vendor
Atlassian
- Vendor
- CVE Published:
- 15 January 2020
What is CVE-2019-15010?
A vulnerability in Bitbucket Server and Bitbucket Data Center allows a remote attacker with user-level permissions to execute arbitrary commands on the affected system. By crafting special payloads submitted through specific user input fields, an attacker can exploit this flaw to gain unauthorized control of the instance. Versions affected span from 3.0.0 to various releases prior to security patches in subsequent versions. Organizations using affected versions should prioritize upgrading to secure their environments against potential exploitation.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Bitbucket Data Center 3.0
Bitbucket Data Center < 5.16.11
Bitbucket Data Center 6.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved