Description
多个Bitbucket Server and Data Center的API站点存在命令注入漏洞，此漏洞是对用户输入的URI验证不足导致的。
Bitbucket Server and Data Center 命令注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.njucm.edu.cn/its/2023/0605/c4052a113732/page.htm
https://www.linktech.com.tw/post/linktech-bitbucket-server-data-center-cve-2022-43781
https://confluence.atlassian.com/bitbucketserver/bitbucket-server-and-data-center-security-advisory-2022-11-16-1180141667.html
https://www.qianxin.com/news/detail?news_id=7345
https://qkl.seebug.org/vuldb/ssvid-99611
https://www.sentinelone.com/vulnerability-database/cve-2022-36804/
https://avd.aliyun.com/detail?id=AVD-2022-43781
https://www.rapid7.com/blog/post/2022/09/20/cve-2022-36804-easily-exploitable-vulnerability-in-atlassian-bitbucket-server-and-data-center/
https://community.atlassian.com/forums/Bitbucket-articles/Bitbucket-Server-amp-Data-Center-Critical-severity-command/ba-p/2116123
https://www.tenable.com/plugins/nessus/170143