A Bitbucket Server, a deployment package for a web interface to work with git repositories, a critical vulnerability (CVE-2022-43781) has been identified, allowing a remote attacker to execute code on the server. The vulnerability can be exploited by an unauthorized user if self-registration is enabled on the server (the ‘Allow public signup’ setting is turned on). Exploitation is also possible by an authenticated user who has rights to change the username (i.e., has ADMIN or SYS_ADMIN privileges). Details are not yet provided, only that the problem is caused by the ability to substitute commands through environment variables.
The issue manifests in branches 7.x and 8.x and has been fixed in releases of Bitbucket Server and Bitbucket Data Center 8.5.0, 8.4.2, 7.17.12, 7.21.6, 8.0.5, 8.1.5, 8.3.3, 8.2.4, 7.6.19. The vulnerability does not occur in the cloud service bitbucket.org and only affects products installed on local servers. The problem also does not appear in szervereken Bitbucket Server and Data Center, where a PostgreSQL database is used for data storage.
Forrás: opennet.ru
