Remote Code Execution Risk in Bitbucket Server and Data Center by Atlassian

CVE-2019-15010

What is CVE-2019-15010?

A vulnerability in Bitbucket Server and Bitbucket Data Center allows a remote attacker with user-level permissions to execute arbitrary commands on the affected system. By crafting special payloads submitted through specific user input fields, an attacker can exploit this flaw to gain unauthorized control of the instance. Versions affected span from 3.0.0 to various releases prior to security patches in subsequent versions. Organizations using affected versions should prioritize upgrading to secure their environments against potential exploitation.

References