[%22Issue] SSRF in Webhooks - CVE-2020-14170 - Create and track feature requests for Atlassian products.

Type: Bug
Resolution: Fixed
Priority: High
Fix Version/s: None
Affects Version/s: 5.4.0, 8.14.0
Component/s: Webhooks
Labels:

Support reference count:
2
Symptom Severity:
Severity 2 - Major
UIS:
2
Bug Fix Policy:
View Atlassian Server bug fix policy

Affected versions of Atlassian Bitbucket Data Center allow remote attackers to access the content of internal network resources via a Server-Side Request Forgery (SSRF) vulnerability in Webhooks.

When running in an environment like Amazon EC2, this flaw may be used to access to a metadata resource that provides access credentials and other potentially confidential information.

mentioned in: Page Failed to load

No work has yet been logged on this issue.

Assignee:: Dyon Georgopoulos

Reporter:: Security Metrics Bot

Affected customers:: 1 This affects my team

Watchers:: 8 Start watching this issue

Created:: 23/Jun/2020 4:27 PM

Updated:: 30/Apr/2024 1:27 AM

Resolved:: 30/Apr/2024 12:03 AM

Details

Description

Attachments

Issue Links

Forms

Activity

[BSERV-12433] SSRF in Webhooks - CVE-2020-14170

People

Dates

Backbone Issue Sync