CVE-2017-18087

State: Published
Severity: Not scored
Published: Feb 15, 2018
Updated: Sep 17, 2024
Reserved: Feb 1, 2018

Description

The download commit resource in Atlassian Bitbucket Server from version 5.1.0 before version 5.1.7, from version 5.2.0 before version 5.2.5, from version 5.3.0 before version 5.3.3 and from version 5.4.0 before version 5.4.1 allows remote attackers to write files to disk potentially allowing them to gain code execution, exploit CVE-2017-1000117 if a vulnerable version of git is in use, and or determine if an internal service exists via an argument injection vulnerability in the at parameter.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Bitbucket ServerAtlassian	from 5.1.0 prior to 5.1.7Affected from 5.2.0 prior to 5.2.5Affected from 5.3.0 prior to 5.3.3Affected from 5.4.0 prior to 5.4.1Affected

References

103038vdb-entry
https://jira.atlassian.com/browse/BSERV-10593

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.