Skip to content
OpenAdvisories
Unscored CVE-2017-18036 EUVD-2017-9176GHSA-mj3p-gh52-6479

The Github repository importer in Atlassian Bitbucket Server before version 5.3.0 allows remote attackers to determine if a service they co…

Published Feb 2, 2018 · Updated Sep 16, 2024 · Assigned by atlassian

Description

The Github repository importer in Atlassian Bitbucket Server before version 5.3.0 allows remote attackers to determine if a service they could not otherwise reach has open ports via a Server Side Request Forgery (SSRF) vulnerability.

Affected products

VendorProductAffectedFixed
Atlassian Bitbucket Server prior to 5.3.0 —

References