Skip to content
OpenAdvisories
Unscored CVE-2020-14170 EUVD-2020-6327GHSA-w6h7-p649-c676

Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the content of internal net…

Published Jul 9, 2020 · Updated Sep 17, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Bitbucket Server

Description

Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the content of internal network resources via a Server-Side Request Forgery (SSRF) vulnerability.

Affected products

VendorProductAffectedFixed
Atlassian Bitbucket Server 5.4.0 – < unspecified, unspecified – < 7.3.1 unspecified

References