Vulnerability in Bitbucket Server leading to code execution on the server
A critical vulnerability (CVE-2022-43781) has been discovered in Bitbucket Server, a package for deploying a web interface for working with git repositories, allowing a remote attacker to execute code on the server. The vulnerability can be exploited by an unauthenticated user if self-registration is allowed on the server (the “Allow public signup” setting is enabled). Exploitation is also possible by an authenticated user who has permission to change their username (i.e., has […]
