{"uuid": "14a7a336-86fd-4879-ba2a-1fc5be72f3ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-36804", "type": "seen", "source": "https://t.me/hacking_Attack/67196", "content": "Black Hat Ethical Hacking\nCritical command injection vulnerability discovered in Bitbucket Server and Data Center\n\nCritical command injection vulnerability discovered in Bitbucket Server and Data CenterPost Views: 4 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Patreon-1.png Subscribe to Patreon to watch this episode.\nReading Time: 1 Minute A critical\u00a0command injection\u00a0vulnerability in a Bitbucket product could allow an attacker to execute arbitrary code, researchers warn.Bitbucket is a Git-based source code repository hosting service owned by Atlassian.\n\nThe flaw, tracked as CVE-2022-36804, is a command injection vulnerability in multiple API endpoints of Bitbucket Server and Data Center.\n\nRead more of the latest news about security vulnerabilities\n\nThis vulnerability could allow remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request.\n\nIt was discovered by researcher \u2018The Grand Pew\u2019, who reported it through Bugcrowd\u2019s bug bounty program.\nSee Also: So you want to be a hacker? Complete Offensive Security and Ethical Hacking Course \u200bUpdate nowAll versions of the Server and Data Center released after 6.10.17 are affected, meaning that all instances running any versions between 7.0.0 and 8.3.0 inclusive are vulnerable.\n\nUsers are urged to update to the latest version. For those who cannot, Bitbucket has offered a workaround.\nTrending: Common and Uncommon types of SQL Injection\nTrending: Offensive Security Tool: WEF (WiFi Exploitation Framework) A blog post\u00a0reads: \u201cA temporary mitigation step is to turn off public repositories globally by setting feature.public.access=false\u00a0as this will change this attack vector from an unauthorized attack to an authorized attack.\u201d\nTrending: WordPress sites hacked with fake Cloudflare DDoS alerts pushing malware\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: portswigger.net Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2022/03/Merch.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-1-4-300x150.png Twilio hackers hit over 130 orgs in massive Okta phishing attackAugust 26, 2022\nReading Time: 5 minutes\n\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-8-300x150.png Hackers use AiTM attack to monitor Microsoft 365 accounts for BEC scamsAugust 25, 2022\nReading Time: 4 minutes\n\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-3-3-300x150.png GitLab patches critical remote code execution bugAugust 24, 2022\nReading Time: 2 minutes\n\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2022/08/Images-for-the-News-posts-1-3-300x150.png Over 80000 Hikvision vulnerable cameras exposed onlineAugust 23, 2022\nReading Time: 4 minutes\nhttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/06/OffSec-Course.png Offensive Security & Ethical Hacking CourseBegin the learning curve of hacking now!\nThe post Critical command injection vulnerability discovered in Bitbucket Server and Data Center first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:25.315027Z"}