Atlassian · Bitbucket Server · CVE-2018-5225
**Name of the Vulnerable Software and Affected Versions**
Atlassian Bitbucket Server versions 4.13.0 through 5.4.7
Atlassian Bitbucket Server versions 5.5.0 through 5.5.7
Atlassian Bitbucket Server versions 5.6.0 through 5.6.4
Atlassian Bitbucket Server versions 5.7.0 through 5.7.2
Atlassian Bitbucket Server versions 5.8.0 through 5.8.1
**Description**
The issue allows authenticated users to gain remote code execution using the in-browser editing feature via editing a symbolic link within a repository.
**Recommendations**
For versions 4.13.0 through 5.4.7, update to version 5.4.8 or later.
For versions 5.5.0 through 5.5.7, update to version 5.5.8 or later.
For versions 5.6.0 through 5.6.4, update to version 5.6.5 or later.
For versions 5.7.0 through 5.7.2, update to version 5.7.3 or later.
For versions 5.8.0 through 5.8.1, update to version 5.8.2 or later.