Atlassian Releases Patches for Critical Flaws Affecting Crowd and Bitbucket Products
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-36804 | Command Injection RCE in Atlassian Bitbucket Server and Data Center | 8.8 | 99% | KEVPoC ×2 | KEV |
| CVE-2022-43781 | There: An attacker with permission to control their username can exploit this issue to execute arbitrary code on the system. This… | 9.8 | 98% | ||
| CVE-2022-43782 | Affected versions of Atlassian Crowd allow an attacker to authenticate as the crowd application via security misconfiguration and subsequent ability to call… | 9.8 | <1% |
From the original article
1 min read at thehackernews.com
Australian software company Atlassian has rolled out security updates to address two critical flaws affecting Bitbucket Server, Data Center, and Crowd products. The issues, tracked as CVE-2022-43781 and CVE-2022-43782 , are both rated 9 out of 10 on the CVSS vulnerability scoring system. CVE-2022-43781, which Atlassian said was introduced in version 7.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.