Server-Side Request Forgery vulnerability in Atlassian Bitbucket Server
CVE-2020-14170

4.3MEDIUM

Key Information:

Vendor
Atlassian
Status
Bitbucket Server
Vendor
CVE Published:
9 July 2020

Summary

A Server-Side Request Forgery vulnerability in Atlassian Bitbucket Server allows remote attackers to exploit the webhook functionality, granting them access to internal network resources. This can lead to exposure of sensitive data or unauthorized actions within the organization's system. Proper configurations and security measures should be applied to mitigate the impact of this vulnerability.

Affected Version(s)

Bitbucket Server 5.4.0

Bitbucket Server < 7.3.1

References

https://jira.atlassian.com/browse/BSERV-12433
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.