Kristy

**Name of the Vulnerable Software and Affected Versions** Bitbucket auto-unapprove plugin (affected versions not specified) **Description** The issue allows an attacker to bypass the auto-unapprove plugin in Bitbucket via minimal brute-force, exploiting the asynchronous events on the back-end. This enables the attacker to merge any code into unsuspecting repositories. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.