CVE-2022-36804 PoC — Atlassian Bitbucket Server 安全漏洞

介绍

# CVE-2022-36804
The Bitbucket Server and Bitbucket Data Center components have a command injection vulnerability, according to information recently discovered by the Sangfor security team. An attacker can submit malicious HTTP requests to execute arbitrary code and eventually get access to the server if they have read access to private or public Bitbucket repositories or access to public repositories with write access.

This repository contains payloads file and full POC for this vulnerability

文件快照

备注