CVE-2018-5225

Name of the Vulnerable Software and Affected Versions Atlassian Bitbucket Server versions 4.13.0 through 5.4.7 Atlassian Bitbucket Server versions 5.5.0 through 5.5.7 Atlassian Bitbucket Server versions 5.6.0 through 5.6.4 Atlassian Bitbucket Server versions 5.7.0 through 5.7.2 Atlassian Bitbucket Server versions 5.8.0 through 5.8.1

Description The issue allows authenticated users to gain remote code execution using the in-browser editing feature via editing a symbolic link within a repository.

Recommendations For versions 4.13.0 through 5.4.7, update to version 5.4.8 or later. For versions 5.5.0 through 5.5.7, update to version 5.5.8 or later. For versions 5.6.0 through 5.6.4, update to version 5.6.5 or later. For versions 5.7.0 through 5.7.2, update to version 5.7.3 or later. For versions 5.8.0 through 5.8.1, update to version 5.8.2 or later.