CVE-2018-5225 In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 (the fixed version for 4.13.0 through 5.4.7), 5.5.0 before 5.5.8 (the fixed version for 5.5.x), 5.6.0 before 5.6.5 (th...
CriticalCVSS 9.9
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 (the fixed version for 4.13.0 through 5.4.7), 5.5.0 before 5.5.8 (the fixed version for 5.5.x), 5.6.0 before 5.6.5 (the fixed version for 5.6.x), 5.7.0 before 5.7.3 (the fixed version for 5.7.x), and 5.8.0 before 5.8.2 (the fixed version for 5.8.x), allows authenticated users to gain remote code execution using the in browser editing feature via editing a symbolic link within a repository.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| atlassian bitbucket | >= 4.13.0, < 5.4.8 | 5.4.8 |
| atlassian bitbucket | >= 5.5.0, < 5.5.8 | 5.5.8 |
| atlassian bitbucket | >= 5.6.0, < 5.6.5 | 5.6.5 |
| atlassian bitbucket | >= 5.7.0, < 5.7.3 | 5.7.3 |
| atlassian bitbucket | >= 5.8.0, < 5.8.2 | 5.8.2 |
| atlassian Bitbucket Server | >= 4.13.0 | No fix listed |
| atlassian Bitbucket Server | < 5.4.8 | 5.4.8 |
| atlassian Bitbucket Server | >= 5.5.0 | No fix listed |
| atlassian Bitbucket Server | < 5.5.8 | 5.5.8 |
| atlassian Bitbucket Server | >= 5.6.0 | No fix listed |
| atlassian Bitbucket Server | < 5.6.5 | 5.6.5 |
| atlassian Bitbucket Server | >= 5.7.0 | No fix listed |
| atlassian Bitbucket Server | < 5.7.3 | 5.7.3 |
| atlassian Bitbucket Server | >= 5.8.0 | No fix listed |
| atlassian Bitbucket Server | < 5.8.2 | 5.8.2 |
References
- 103488 third-party-advisory vdb-entry
- confluence.atlassian.com vendor-advisory
- jira.atlassian.com vendor-advisory