CVE-2022-36804
Atlassian Bitbucket Server and Data Center Command Injection Vulnerability
Multiple API endpoints of Atlassian Bitbucket Server and Data Center contain a command injection vulnerability where an attacker with access to a public Bitbucket repository, or with read permissions to a private one, can execute code by sending a malicious HTTP request. Vendor/Product: Atlassian Bitbucket Server and Data Center. Added to CISA KEV 2022-09-30; required action: Apply updates per vendor instructions.