Remote Code Execution Vulnerability in Bitbucket Server and Data Center by Atlassian

CVE-2019-20097

What is CVE-2019-20097?

A vulnerability in Bitbucket Server and Bitbucket Data Center allows remote attackers with certain permissions to exploit the post-receive hook. By uploading a specifically crafted file, an attacker can execute arbitrary commands on the server. This vulnerability affects multiple versions, making it critical for users to update their systems to avoid potential exploits.

References