PT-2018-6630
CVE-2017-18038
·
Published
2018-02-02
·
Updated
2018-02-14
Description by
CVSS 3.1
5.3
MediumMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Atlassian Bitbucket Server versions prior to 5.6.0
Description:
The issue allows remote attackers to read the first line of arbitrary files via a path traversal vulnerability through the default branch name in the repository settings resource.
Recommendations:
For versions prior to 5.6.0, update to version 5.6.0 or later to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾