CVE-2020-14170

—

CVSS 3.1

4.3 medium

EPSS

<1%p55

Published

Jul 9, 2020 (Jul 9, 2020)

Modified

Jun 17, 2026

Description

Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the content of internal network resources via a Server-Side Request Forgery (SSRF) vulnerability.

Vendors: atlassian
Products: bitbucket
Weakness: CWE-918
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.