CVE-2022-36804 PoC — Atlassian Bitbucket Server 安全漏洞

Source

https://github.com/Vulnmachines/bitbucket-cve-2022-36804

Associated Vulnerability

Title:Atlassian Bitbucket Server 安全漏洞 (CVE-2022-36804)
Description:Atlassian Bitbucket Server是澳大利亚Atlassian公司的一款Git代码托管解决方案。该方案能够管理并审查代码，具有差异视图、JIRA集成和构建集成等功能。 Atlassian Bitbucket Server and Data Center存在安全漏洞，该漏洞源于允许对公共或私有Bitbucket库有读取权限的远程攻击者通过发送恶意的HTTP请求执行任意代码。以下产品及版本受到影响：7.0.0 至 7.6.17 之前版本，7.7.0 至 7.17.10 之前版本，7.18.0

Description

CVE-2022-36804 Atlassian Bitbucket Command Injection Vulnerability

Readme

# bitbucket-cve-2022-36804
CVE-2022-36804 Atlassian Bitbucket Command Injection Vulnerability

### POC

![cve-2022-36804](https://user-images.githubusercontent.com/79006904/191733074-718eb464-9f77-48ce-9b90-9a14fc29f4fb.png)


#### Follow us
#### [YouTube](https://www.youtube.com/c/vulnmachines)
#### [Twitter](https://www.twitter.com/vulnmachines)
#### [Facebook](https://www.facebook.com/vulnmachines)
#### [LinkedIn](https://www.linkedin.com/company/vulnmachines)

File Snapshot


 [4.0K]  /data/pocs/e8ce51d05e0f4d61267db28de79e38dbec14352c
├── [ 573]  payload
├── [ 189]  payload2
└── [ 468]  README.md

0 directories, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!