cnvd - cnvd-2022-60680

cnvd-2022-60680

Vulnerability from cnvd

Title: Atlassian Bitbucket Server和Data Center命令执行漏洞

Description:

Atlassian Bitbucket Server是澳大利亚Atlassian公司的一款Git代码托管解决方案。该方案能够管理并审查代码，具有差异视图、JIRA集成和构建集成等功能。

Atlassian Bitbucket Server和Data Center存在命令执行漏洞，该漏洞是由于多个API端点中的漏洞造成的。通过发送精心编制的HTTP请求，攻击者可利用此漏洞在系统上执行任意命令。

Severity: 高

Patch Name: Atlassian Bitbucket Server和Data Center命令执行漏洞的补丁

Patch Description:

Atlassian Bitbucket Server是澳大利亚Atlassian公司的一款Git代码托管解决方案。该方案能够管理并审查代码，具有差异视图、JIRA集成和构建集成等功能。

Atlassian Bitbucket Server和Data Center存在命令执行漏洞，该漏洞是由于多个API端点中的漏洞造成的。通过发送精心编制的HTTP请求，攻击者可利用此漏洞在系统上执行任意命令。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description:

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://jira.atlassian.com/browse/BSERV-13438

Reference: https://cxsecurity.com/cveshow/CVE-2022-36804/

Impacted products

Name
['Atlassian Atlassian Bitbucket Server and Data Center >=7.0.0，<=7.6.17', 'Atlassian Atlassian Bitbucket Server and Data Center >=7.7.0，<=7.17.10', 'Atlassian Atlassian Bitbucket Server and Data Center >=7.18.0，<=7.21.4', 'Atlassian Atlassian Bitbucket Server and Data Center >=8.0.0，<=8.0.3', 'Atlassian Atlassian Bitbucket Server and Data Center >=8.1.0，<=8.1.3', 'Atlassian Atlassian Bitbucket Server and Data Center >=8.2.0，<=8.2.2', 'Atlassian Atlassian Bitbucket Server and Data Center >=8.3.0，<=8.3.1']

Name

['Atlassian Atlassian Bitbucket Server and Data Center >=7.0.0，<=7.6.17', 'Atlassian Atlassian Bitbucket Server and Data Center >=7.7.0，<=7.17.10', 'Atlassian Atlassian Bitbucket Server and Data Center >=7.18.0，<=7.21.4', 'Atlassian Atlassian Bitbucket Server and Data Center >=8.0.0，<=8.0.3', 'Atlassian Atlassian Bitbucket Server and Data Center >=8.1.0，<=8.1.3', 'Atlassian Atlassian Bitbucket Server and Data Center >=8.2.0，<=8.2.2', 'Atlassian Atlassian Bitbucket Server and Data Center >=8.3.0，<=8.3.1']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-36804"
    }
  },
  "description": "Atlassian Bitbucket Server\u662f\u6fb3\u5927\u5229\u4e9aAtlassian\u516c\u53f8\u7684\u4e00\u6b3eGit\u4ee3\u7801\u6258\u7ba1\u89e3\u51b3\u65b9\u6848\u3002\u8be5\u65b9\u6848\u80fd\u591f\u7ba1\u7406\u5e76\u5ba1\u67e5\u4ee3\u7801\uff0c\u5177\u6709\u5dee\u5f02\u89c6\u56fe\u3001JIRA\u96c6\u6210\u548c\u6784\u5efa\u96c6\u6210\u7b49\u529f\u80fd\u3002\n\nAtlassian Bitbucket Server\u548cData Center\u5b58\u5728\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u591a\u4e2aAPI\u7aef\u70b9\u4e2d\u7684\u6f0f\u6d1e\u9020\u6210\u7684\u3002\u901a\u8fc7\u53d1\u9001\u7cbe\u5fc3\u7f16\u5236\u7684HTTP\u8bf7\u6c42\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u547d\u4ee4\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://jira.atlassian.com/browse/BSERV-13438",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-60680",
  "openTime": "2022-08-31",
  "patchDescription": "Atlassian Bitbucket Server\u662f\u6fb3\u5927\u5229\u4e9aAtlassian\u516c\u53f8\u7684\u4e00\u6b3eGit\u4ee3\u7801\u6258\u7ba1\u89e3\u51b3\u65b9\u6848\u3002\u8be5\u65b9\u6848\u80fd\u591f\u7ba1\u7406\u5e76\u5ba1\u67e5\u4ee3\u7801\uff0c\u5177\u6709\u5dee\u5f02\u89c6\u56fe\u3001JIRA\u96c6\u6210\u548c\u6784\u5efa\u96c6\u6210\u7b49\u529f\u80fd\u3002\r\n\r\nAtlassian Bitbucket Server\u548cData Center\u5b58\u5728\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\uff0c\u8be5\u6f0f\u6d1e\u662f\u7531\u4e8e\u591a\u4e2aAPI\u7aef\u70b9\u4e2d\u7684\u6f0f\u6d1e\u9020\u6210\u7684\u3002\u901a\u8fc7\u53d1\u9001\u7cbe\u5fc3\u7f16\u5236\u7684HTTP\u8bf7\u6c42\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u6b64\u6f0f\u6d1e\u5728\u7cfb\u7edf\u4e0a\u6267\u884c\u4efb\u610f\u547d\u4ee4\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Atlassian Bitbucket Server\u548cData Center\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Atlassian Atlassian Bitbucket Server and Data Center \u003e=7.0.0\uff0c\u003c=7.6.17",
      "Atlassian Atlassian Bitbucket Server and Data Center \u003e=7.7.0\uff0c\u003c=7.17.10",
      "Atlassian Atlassian Bitbucket Server and Data Center \u003e=7.18.0\uff0c\u003c=7.21.4",
      "Atlassian Atlassian Bitbucket Server and Data Center \u003e=8.0.0\uff0c\u003c=8.0.3",
      "Atlassian Atlassian Bitbucket Server and Data Center \u003e=8.1.0\uff0c\u003c=8.1.3",
      "Atlassian Atlassian Bitbucket Server and Data Center \u003e=8.2.0\uff0c\u003c=8.2.2",
      "Atlassian Atlassian Bitbucket Server and Data Center \u003e=8.3.0\uff0c\u003c=8.3.1"
    ]
  },
  "referenceLink": "https://cxsecurity.com/cveshow/CVE-2022-36804/",
  "serverity": "\u9ad8",
  "submitTime": "2022-08-31",
  "title": "Atlassian Bitbucket Server\u548cData Center\u547d\u4ee4\u6267\u884c\u6f0f\u6d1e"
}

CVE-2022-36804 (GCVE-0-2022-36804)

Vulnerability from cvelistv5

Published

2022-08-25 05:40

Modified

2025-07-30 01:37

Severity ?

8.8 (High) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CWE

Remote Code Execution

Summary

Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8.0.0 before version 8.0.3, from version 8.1.0 before version 8.1.3, and from version 8.2.0 before version 8.2.2, and from version 8.3.0 before 8.3.1 allows remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request. This vulnerability was reported via our Bug Bounty Program by TheGrandPew.

References

▼	URL	Tags
	https://jira.atlassian.com/browse/BSERV-13438
	http://packetstormsecurity.com/files/168470/Bitbucket-Git-Command-Injection.html
	http://packetstormsecurity.com/files/171453/Bitbucket-7.0.0-Remote-Command-Execution.html

Impacted products

Vendor

Product

Version

▼

Atlassian

Bitbucket Server

Version: 7.0.0   < unspecified
Version: unspecified   < 7.6.17
Version: 7.7.0   < unspecified
Version: unspecified   < 7.17.10
Version: 7.18.0   < unspecified
Version: unspecified   < 7.21.4
Version: 8.0.0   < unspecified
Version: unspecified   < 8.0.3
Version: 8.1.0   < unspecified
Version: unspecified   < 8.1.3
Version: 8.2.0   < unspecified
Version: unspecified   < 8.2.2
Version: 8.3.0   < unspecified
Version: unspecified   < 8.3.1

Atlassian

Bitbucket Data Center

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T10:14:28.471Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://jira.atlassian.com/browse/BSERV-13438"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/168470/Bitbucket-Git-Command-Injection.html"
          },
          {
            "tags": [
              "x_transferred"
            ],
            "url": "http://packetstormsecurity.com/files/171453/Bitbucket-7.0.0-Remote-Command-Execution.html"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 8.8,
              "baseSeverity": "HIGH",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "LOW",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-36804",
                "options": [
                  {
                    "Exploitation": "active"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-01-29T16:19:10.861167Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          },
          {
            "other": {
              "content": {
                "dateAdded": "2022-09-30",
                "reference": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-36804"
              },
              "type": "kev"
            }
          }
        ],
        "problemTypes": [
          {
            "descriptions": [
              {
                "cweId": "CWE-78",
                "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          },
          {
            "descriptions": [
              {
                "cweId": "CWE-88",
                "description": "CWE-88 Improper Neutralization of Argument Delimiters in a Command (\u0027Argument Injection\u0027)",
                "lang": "en",
                "type": "CWE"
              }
            ]
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-07-30T01:37:39.068Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "timeline": [
          {
            "lang": "en",
            "time": "2022-09-30T00:00:00+00:00",
            "value": "CVE-2022-36804 added to CISA KEV"
          }
        ],
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Bitbucket Server",
          "vendor": "Atlassian",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.6.17",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "7.7.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.17.10",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "7.18.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.21.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "8.0.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "8.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "8.1.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "8.2.0",
              "versionType": "custom"
            },
            {
              "lessThan": "8.2.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "8.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "8.3.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        },
        {
          "product": "Bitbucket Data Center",
          "vendor": "Atlassian",
          "versions": [
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "7.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.6.17",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "7.7.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.17.10",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "7.18.0",
              "versionType": "custom"
            },
            {
              "lessThan": "7.21.4",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "8.0.0",
              "versionType": "custom"
            },
            {
              "lessThan": "8.0.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "8.1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "8.1.3",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "8.2.0",
              "versionType": "custom"
            },
            {
              "lessThan": "8.2.2",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            },
            {
              "lessThan": "unspecified",
              "status": "affected",
              "version": "8.3.0",
              "versionType": "custom"
            },
            {
              "lessThan": "8.3.1",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2022-08-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8.0.0 before version 8.0.3, from version 8.1.0 before version 8.1.3, and from version 8.2.0 before version 8.2.2, and from version 8.3.0 before 8.3.1 allows remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request. This vulnerability was reported via our Bug Bounty Program by TheGrandPew."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "Remote Code Execution",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2023-03-24T00:00:00.000Z",
        "orgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66",
        "shortName": "atlassian"
      },
      "references": [
        {
          "url": "https://jira.atlassian.com/browse/BSERV-13438"
        },
        {
          "url": "http://packetstormsecurity.com/files/168470/Bitbucket-Git-Command-Injection.html"
        },
        {
          "url": "http://packetstormsecurity.com/files/171453/Bitbucket-7.0.0-Remote-Command-Execution.html"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66",
    "assignerShortName": "atlassian",
    "cveId": "CVE-2022-36804",
    "datePublished": "2022-08-25T05:40:08.899Z",
    "dateReserved": "2022-07-26T00:00:00.000Z",
    "dateUpdated": "2025-07-30T01:37:39.068Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted