Disclosure Date 2022/11/16
Remote code execution in Atlassian BitBucket
Atlassian Bitbucket における RCE (Remote Code Execution)
There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control their username can exploit this issue to gain code execution and execute code on the system.