[%22Issue] Path traversal through the default branch name for a repository in the repository settings resource - CVE-2017-18038 - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: Medium
Fix Version/s: 5.6.0
Affects Version/s: None
Component/s: None
Labels:

Symptom Severity:
Severity 2 - Major
Bug Fix Policy:
View Atlassian Server bug fix policy

The repository settings resource in Atlassian Bitbucket Server before version 5.6.0 allows remote attackers to read the first line of arbitrary files via a path traversal vulnerability through the default branch name.

No work has yet been logged on this issue.

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Affected customers:: 0 This affects my team

Watchers:: 2 Start watching this issue

Created:: 02/Feb/2018 12:11 AM

Updated:: 05/Dec/2019 1:33 AM

Resolved:: 02/Feb/2018 1:30 AM

Details

Description

Attachments

Forms

Activity

[BSERV-10592] Path traversal through the default branch name for a repository in the repository settings resource - CVE-2017-18038

People

Dates

Backbone Issue Sync