PT-2018-16816
CVE-2018-5225
·
تاريخ النشر
2018-03-22
·
تاريخ التحديث
2018-04-20
الوصف من
CVSS 3.1
9.9
حرجةالمقاييسAV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Atlassian Bitbucket Server versions 4.13.0 through 5.4.7
Atlassian Bitbucket Server versions 5.5.0 through 5.5.7
Atlassian Bitbucket Server versions 5.6.0 through 5.6.4
Atlassian Bitbucket Server versions 5.7.0 through 5.7.2
Atlassian Bitbucket Server versions 5.8.0 through 5.8.1
Description
The issue allows authenticated users to gain remote code execution using the in-browser editing feature via editing a symbolic link within a repository.
Recommendations
For versions 4.13.0 through 5.4.7, update to version 5.4.8 or later.
For versions 5.5.0 through 5.5.7, update to version 5.5.8 or later.
For versions 5.6.0 through 5.6.4, update to version 5.6.5 or later.
For versions 5.7.0 through 5.7.2, update to version 5.7.3 or later.
For versions 5.8.0 through 5.8.1, update to version 5.8.2 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾