Disclosure Date 2022/11/16
CVE-2022-43781
Remote code execution in Atlassian BitBucket
Atlassian Bitbucket における RCE (Remote Code Execution)
Credit
Description
There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control their username can exploit this issue to gain code execution and execute code on the system.
