CVE HUB ๐Ÿ‘พ
788 subscribers
19.3K links
Github Red team resource push
Github ็บข้˜Ÿ่ต„ๆบๆŽจ้€
Cve/Rce/Exploit/Redteam/ๆผๆดžๅˆฉ็”จ/็บข้˜Ÿ

Channel push 24/7 (real time)
้ข‘้“ๅ…จๅคฉๅ€™ๆŽจ้€(ๅฎžๆ—ถ)
Download Telegram
๐Ÿ‘พCVE SERVICE ๐Ÿท#CVE
Mumber: CVE-2022-36804
Github: https://github.com/cryptolakk/CVE-2022-36804-RCE
Describe:
Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8.0.0 before version 8.0.3, from version 8.1.0 before version 8.1.3, and from version 8.2.0 before version 8.2.2, and from version 8.3.0 before 8.3.1 allows remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request. This vulnerability was reported via our Bug Bounty Program by TheGrandPew.