Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Fixed
Priority: Low
Fix Version/s: 5.3.0
Affects Version/s: None
Component/s: None
Labels:
- CVE-2017-18036
- advisory
- advisory-released
- bugbounty
- cvss-low
- security
- ssrf

Symptom Severity:
Severity 3 - Minor
Bug Fix Policy:
View Atlassian Server bug fix policy

Description

The Github repository importer in Atlassian Bitbucket Server before version 5.3.0 allows remote attackers to determine if a service they could not otherwise reach has open ports via a Server Side Request Forgery (SSRF) vulnerability.

Attachments

Activity

People

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Votes:: 0 Vote for this issue

Watchers:: 1 Start watching this issue

Dates

Created:: 02/Feb/2018 12:10 AM

Updated:: 24/Oct/2018 5:28 AM

Resolved:: 02/Feb/2018 12:33 AM