PT-2024-19015 · Atlassian · Bitbucket

Taha Yildirim · Published 2024-07-24 · Updated 2025-07-30 · CVE-2024-21684

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Bitbucket Data Center versions 8.0.0 through 8.9.12 Bitbucket Data Center versions 8.19.0 through 8.19.1

Description The issue is an open redirect vulnerability that allows an unauthenticated attacker to redirect a victim user upon login to Bitbucket Data Center to any arbitrary site. This can be utilized for further exploitation and has low impact to confidentiality, with no impact to integrity and availability, requiring user interaction.

Recommendations For Bitbucket Data Center versions 8.0.0 through 8.9.12, upgrade to version 8.9.13 or later. For Bitbucket Data Center versions 8.19.0 through 8.19.1, upgrade to version 8.19.2 or later.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2024-21684

Affected Products

Bitbucket

References · 6

• https://osv.dev/vulnerability/CVE-2024-21684 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-21684 · Security Note
• https://jira.atlassian.com/browse/BSERV-19454 · Vendor Advisory
• https://t.me/cvenotify/87366 · Telegram Post
• https://t.me/cvedetector/1585 · Telegram Post
• https://t.me/cveNotify/130250 · Telegram Post