Unscored CVE-2020-14171 EUVD-2020-6328GHSA-83rh-f8p6-mcrp

Atlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to intercept unencrypted repository import reque…

Published Jul 9, 2020 · Updated Sep 17, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Bitbucket Server

Description

Atlassian Bitbucket Server from version 4.9.0 before version 7.2.4 allows remote attackers to intercept unencrypted repository import requests via a Man-in-the-Middle (MITM) attack.

Affected products

Vendor	Product	Affected	Fixed
Atlassian	Bitbucket Server	4.9.0 – < unspecified, unspecified – < 7.2.4	unspecified

References

https://jira.atlassian.com/browse/BSERV-12434