PT-2022-4497 · Atlassian · Bitbucket+1

Thegrandpew · Published 2022-08-25 · Updated 2025-02-09 · CVE-2022-36804

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Atlassian Bitbucket Server and Data Center versions 7.0.0 through 7.6.17 Atlassian Bitbucket Server and Data Center versions 7.7.0 through 7.17.10 Atlassian Bitbucket Server and Data Center versions 7.18.0 through 7.21.4 Atlassian Bitbucket Server and Data Center versions 8.0.0 through 8.0.3 Atlassian Bitbucket Server and Data Center versions 8.1.0 through 8.1.3 Atlassian Bitbucket Server and Data Center versions 8.2.0 through 8.2.2 Atlassian Bitbucket Server and Data Center versions 8.3.0 through 8.3.1

Description The issue allows remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request. This is due to errors in processing input data in the API interface of the tool for hosting, managing, and collaborating on Git code. The vulnerability was reported via the Bug Bounty Program.

Recommendations For versions 7.0.0 through 7.6.17, update to version 7.6.17 or later. For versions 7.7.0 through 7.17.10, update to version 7.17.10 or later. For versions 7.18.0 through 7.21.4, update to version 7.21.4 or later. For versions 8.0.0 through 8.0.3, update to version 8.0.3 or later. For versions 8.1.0 through 8.1.3, update to version 8.1.3 or later. For versions 8.2.0 through 8.2.2, update to version 8.2.2 or later. For versions 8.3.0 through 8.3.1, update to version 8.3.1 or later.

Exploit

Fix

Argument Injection

OS Command Injection

Weakness Enumeration

CWE-88

CWE-78

Related Identifiers

BDU:2022-05364

CVE-2022-36804

Affected Products

Bitbucket

Bitbucket Server

References · 52

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/bitbucket_git_cmd_injection.rb · Exploit
• 🔥 https://github.com/notdls/CVE-2022-36804 · Exploit
• 🔥 https://github.com/fed-speak/CVE-2022-36804-PoC-Exploit · Exploit
• 🔥 https://github.com/benjaminhays/CVE-2022-36804-PoC-Exploit · Exploit
• 🔥 https://github.com/notxesh/CVE-2022-36804-PoC · Exploit
• 🔥 https://github.com/BenHays142/CVE-2022-36804-PoC-Exploit · Exploit
• 🔥 https://github.com/Inplex-sys/CVE-2022-36804 · Exploit
• 🔥 https://github.com/ColdFusionX/CVE-2022-36804 · Exploit
• 🔥 https://github.com/walnutsecurity/cve-2022-36804 · Exploit
• 🔥 https://github.com/tahtaciburak/cve-2022-36804 · Exploit
• 🔥 https://github.com/kljunowsky/CVE-2022-36804-POC · Exploit
• 🔥 https://github.com/khal4n1/CVE-2022-36804 · Exploit
• 🔥 https://github.com/Vulnmachines/bitbucket-cve-2022-36804 · Exploit
• 🔥 https://github.com/Chocapikk/CVE-2022-36804-ReverseShell · Exploit
• 🔥❌ https://github.com/cryptolakk/CVE-2022-36804-RCE · Exploit, Deleted