CVE-2022-43781

There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control their username can exploit this issue to execute arbitrary code on the system. This vulnerability can be unauthenticated if the Bitbucket Server and Data Center instance has enabled “Allow public signup”.

Affected

Atlassian · Bitbucket Data Center · Bitbucket Server

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

98.04% chance of exploitation in the next 30 days, 100th percentile

Published

2022-11-17

Updated

2024-10-02

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/bitbucket_env_var_rce…

Security advisories

• https://confluence.atlassian.com/x/Y4hXRg
• https://jira.atlassian.com/browse/BSERV-13522

References

• CVE Record
• NVD entry