应用安全 - 软件漏洞 - Atlassian - Bitbucket漏洞汇总

CVE-2019-20097

 

Date
2019

类型
RCE

影响范围
Atlassian Bitbucket Server >=1.*.*，<=5.16.*
Atlassian Bitbucket Server 6.0.*，<6.0.11
Atlassian Bitbucket Server 6.1.*，<6.1.9
Atlassian Bitbucket Server 6.2.*，<6.2.7
Atlassian Bitbucket Server 6.3.*，<6.3.6
Atlassian Bitbucket Server 6.4.*，<6.4.4
Atlassian Bitbucket Server 6.5.*，<6.5.3
Atlassian Bitbucket Server 6.6.*，<6.6.3
Atlassian Bitbucket Server 6.7.*，<6.7.3
Atlassian Bitbucket Server 6.8.*，<6.8.2
Atlassian Bitbucket Server 6.9.*，<6.9.1
Atlassian Bitbucket Data Center >=1.*.*，<=5.16.*
Atlassian Bitbucket Data Center 6.0.*，<6.0.11
Atlassian Bitbucket Data Center 6.1.*，<6.1.9
Atlassian Bitbucket Data Center 6.2.*，<6.2.7
Atlassian Bitbucket Data Center 6.3.*，<6.3.6
Atlassian Bitbucket Data Center 6.4.*，<6.4.4
Atlassian Bitbucket Data Center 6.5.*，<6.5.3
Atlassian Bitbucket Data Center 6.6.*，<6.6.3
Atlassian Bitbucket Data Center 6.7.*，<6.7.3
Atlassian Bitbucket Data Center 6.8.*，<6.8.2
Atlassian Bitbucket Data Center 6.9.*，<6.9.1

 

CVE-2019-15012

Date
2019

类型
RCE

影响范围
Atlassian Bitbucket Server 6.0.*，<6.0.11
Atlassian Bitbucket Server 6.1.*，<6.1.9
Atlassian Bitbucket Server 6.2.*，<6.2.7
Atlassian Bitbucket Server 6.3.*，<6.3.6
Atlassian Bitbucket Server 6.4.*，<6.4.4
Atlassian Bitbucket Server 6.5.*，<6.5.3
Atlassian Bitbucket Server 6.6.*，<6.6.3
Atlassian Bitbucket Server 6.7.*，<6.7.3
Atlassian Bitbucket Server 6.8.*，<6.8.2
Atlassian Bitbucket Server 6.9.*，<6.9.1
Atlassian Bitbucket Data Center 6.0.*，<6.0.11
Atlassian Bitbucket Data Center 6.1.*，<6.1.9
Atlassian Bitbucket Data Center 6.2.*，<6.2.7
Atlassian Bitbucket Data Center 6.3.*，<6.3.6
Atlassian Bitbucket Data Center 6.4.*，<6.4.4
Atlassian Bitbucket Data Center 6.5.*，<6.5.3
Atlassian Bitbucket Data Center 6.6.*，<6.6.3
Atlassian Bitbucket Data Center 6.7.*，<6.7.3
Atlassian Bitbucket Data Center 6.8.*，<6.8.2
Atlassian Bitbucket Data Center 6.9.*，<6.9.1
Atlassian Bitbucket Server >=4.13.*，<=5.16.*
Atlassian Bitbucket Data Center >=4.13.*，<=5.16.*

 

cve-2019-15000

Date
2019

类型
RCE

影响范围

• version < 5.16.10

• 6.0.0 <= version < 6.0.10

• 6.1.0 <= version < 6.1.8

• 6.2.0 <= version < 6.2.6

• 6.3.0 <= version < 6.3.5

• 6.4.0 <= version < 6.4.3

• 6.5.0 <= version < 6.5.2

• 
  1.x

• 2.x

• 3.x

• 4.x

• 5.x before 5.16.10 (the fixed version for 5.16.x)

• 6.0.x before 6.0.10 (the fixed version for 6.0.x)

• 6.1.x before 6.1.8 (the fixed version for 6.1.x)

• 6.2.x before 6.2.6 (the fixed version for 6.2.x)

• 6.3.x before 6.3.5 (the fixed version for 6.3.x)

• 6.4.x before 6.4.3 (the fixed version for 6.4.x)

• 6.5.x before 6.5.2 (the fixed version for 6.5.x)

CVE-2018-5225

Date
2018

类型
RCE

影响范围
Atlassian Bitbucket Server >=13.0，<5.4.8
Atlassian Bitbucket Server >=5.0，<5.5.8
Atlassian Bitbucket Server >=6.0，<5.6.5
Atlassian Bitbucket Server >=7.0，<5.7.3
Atlassian Bitbucket Server >=8.0，<5.8.2

CVE-2019-3397

Date
2019

类型
RCE

影响范围

• 5.13.0 <= version < 5.13.6
• 5.14.0 <= version < 5.14.4
• 5.15.0 <= version < 5.15.3
• 5.16.0 <= version < 5.16.3
• 6.0.0 <= version < 6.0.3
• 6.1.0 <= version 6.1.2