Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-2p9p-h8q6-52g9

Опубликовано: 21 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 9.8

Описание

SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior to 7.19.4, and 7.20.0 allow a remote, unauthenticated attacker to execute arbitrary code via Java deserialization.

SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior to 7.19.4, and 7.20.0 allow a remote, unauthenticated attacker to execute arbitrary code via Java deserialization.

EPSS

Процентиль: 99%
0.81388
Высокий

9.8 Critical

CVSS3

Дефекты

CWE-502

Связанные уязвимости

CVSS3: 9.8
nvd
почти 4 года назад

SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior to 7.19.4, and 7.20.0 allow a remote, unauthenticated attacker to execute arbitrary code via Java deserialization.

CVSS3: 9.8
fstec
почти 4 года назад

Уязвимость платформы Hazelcast программного продукта обработки данных Atlassian Bitbucket Data Center, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 99%
0.81388
Высокий

9.8 Critical

CVSS3

Дефекты

CWE-502