CVE-2018-5225

CVE-2018-5225: vulnerability in Atlassian Bitbucket Server

Published · Updated

Follow this CVE+ Monitor Bitbucket Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 3.4%
In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 (the fixed version for 4.13.0 through 5.4.7), 5.5.0 before 5.5.8 (the fixed version for 5.5.x), 5.6.0 before 5.6.5 (the fixed version for 5.6.x), 5.7.0 before 5.7.3 (the fixed version for 5.7.x), and 5.8.0 before 5.8.2 (the fixed version for 5.8.x), allows authenticated users to gain remote code execution using the in browser editing feature via editing a symbolic link within a repository.
Affected products
Atlassian · Bitbucket Server
Related CVEs — Atlassian Bitbucket Server

In the same product, most dangerous first.

CVE-2022-36804HIGHCVE-2022-36804EPSS 99.1%KEVCVE-2022-43781CRITICALCVE-2022-43781EPSS 98.0%CVE-2023-22513HIGHCVE-2023-22513EPSS 15.3%CVE-2019-15000—CVE-2019-15000EPSS 7.8%CVE-2022-26136CRITICALCVE-2022-26136EPSS 5.7%CVE-2019-15010—CVE-2019-15010EPSS 2.6%