Vulnerabilitycritical
Atlassian fixed 2 critical flaws in Crowd and Bitbucket products
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-43781 | There: An attacker with permission to control their username can exploit this issue to execute arbitrary code on the system. This… | 9.8 | 98% | ||
| CVE-2022-43782 | Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and subsequent ability to call… | 9.8 | <1% |
From the original article
2 min read at securityaffairs.comAtlassian addressed this week two critical vulnerabilities impacting its Crowd and Bitbucket products. Atlassian announced the release of security updates to address critical-severity vulnerabilities in its identity management platform, Crowd Server and Data Center , and in the Bitbucket Server and Data Center , a self-managed solution that provides source code collaboration for professional teams.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.