PT-2020-13909
CVE-2020-14170
·
تاريخ النشر
2020-07-09
·
تاريخ التحديث
2020-07-15
الوصف من
CVSS 3.1
4.3
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Atlassian Bitbucket Server versions 5.4.0 through 7.3.0
Description
The issue allows remote attackers to access the content of internal network resources via a Server-Side Request Forgery (SSRF) vulnerability. This is related to webhooks in the affected software.
Recommendations
For versions 5.4.0 through 7.3.0, update to version 7.3.1 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾