{"id":"CVE-2022-43781","state":"PUBLISHED","title":"There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control their username can exploit this i","description":"There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control their username can exploit this issue to execute arbitrary code on the system. This vulnerability can be unauthenticated if the Bitbucket Server and Data Center instance has enabled “Allow public signup”.","publishedAt":"2022-11-17T00:00:01.210Z","updatedAt":"2024-10-02T14:56:09.693Z","severity":{"score":9.8,"label":"Critical","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","source":"CISA-ADP"},"assigner":"atlassian","products":["Atlassian Bitbucket Data Center","Atlassian Bitbucket Server"],"affected":[{"vendor":"Atlassian","product":"Bitbucket Data Center","versions":[{"version":"before 7.0","status":"unaffected"},{"version":"before 7.17.12","status":"affected"},{"version":"before 7.21.6","status":"affected"},{"version":"before 7.6.19","status":"affected"},{"version":"before 8.0.5","status":"affected"},{"version":"before 8.1.5","status":"affected"},{"version":"before 8.2.4","status":"affected"},{"version":"before 8.3.3","status":"affected"},{"version":"before 8.4.2","status":"affected"},{"version":"before 8.5.0","status":"affected"}]},{"vendor":"Atlassian","product":"Bitbucket Server","versions":[{"version":"before 7.0","status":"unaffected"},{"version":"before 7.17.12","status":"affected"},{"version":"before 7.21.6","status":"affected"},{"version":"before 7.6.19","status":"affected"},{"version":"before 8.0.5","status":"affected"},{"version":"before 8.1.5","status":"affected"},{"version":"before 8.2.4","status":"affected"},{"version":"before 8.3.3","status":"affected"},{"version":"before 8.4.2","status":"affected"},{"version":"before 8.5.0","status":"affected"}]}],"references":["https://confluence.atlassian.com/x/Y4hXRg","https://jira.atlassian.com/browse/BSERV-13522"],"weaknesses":["CWE-77"],"ingestedAt":"2026-10-29T19:50:43.581Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/43xxx/CVE-2022-43781.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-43781","state":"PUBLISHED","datePublished":"2022-11-17T00:00:01.210Z","dateUpdated":"2024-10-02T14:56:09.693Z","assignerShortName":"atlassian","assignerOrgId":"f08a6ab8-ed46-4c22-8884-d911ccfe3c66","requesterUserId":"4ceb4895-2afc-4c29-bf72-c2e04b367c52","dateReserved":"2022-10-26T14:49:11.114Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"There is a command injection vulnerability using environment variables in Bitbucket Server and Data Center. An attacker with permission to control their username can exploit this issue to execute arbitrary code on the system. This vulnerability can be unauthenticated if the Bitbucket Server and Data Center instance has enabled “Allow public signup”."}],"affected":[{"vendor":"Atlassian","product":"Bitbucket Data Center","versions":[{"version":"before 7.0","status":"unaffected"},{"version":"before 7.17.12","status":"affected"},{"version":"before 7.21.6","status":"affected"},{"version":"before 7.6.19","status":"affected"},{"version":"before 8.0.5","status":"affected"},{"version":"before 8.1.5","status":"affected"},{"version":"before 8.2.4","status":"affected"},{"version":"before 8.3.3","status":"affected"},{"version":"before 8.4.2","status":"affected"},{"version":"before 8.5.0","status":"affected"}]},{"vendor":"Atlassian","product":"Bitbucket Server","versions":[{"version":"before 7.0","status":"unaffected"},{"version":"before 7.17.12","status":"affected"},{"version":"before 7.21.6","status":"affected"},{"version":"before 7.6.19","status":"affected"},{"version":"before 8.0.5","status":"affected"},{"version":"before 8.1.5","status":"affected"},{"version":"before 8.2.4","status":"affected"},{"version":"before 8.3.3","status":"affected"},{"version":"before 8.4.2","status":"affected"},{"version":"before 8.5.0","status":"affected"}]}],"references":[{"url":"https://confluence.atlassian.com/x/Y4hXRg"},{"url":"https://jira.atlassian.com/browse/BSERV-13522"}],"problemTypes":[{"descriptions":[{"description":"RCE (Remote Code Execution)","lang":"en","type":"RCE (Remote Code Execution)"}]}],"providerMetadata":{"shortName":"atlassian","orgId":"f08a6ab8-ed46-4c22-8884-d911ccfe3c66","dateUpdated":"2022-11-17T00:00:01.210Z"},"credits":[{"lang":"en","value":"https://github.com/Ry0taK"}]},"adp":[{"title":"CVE Program Container","references":[{"url":"https://confluence.atlassian.com/x/Y4hXRg","tags":["x_transferred"]},{"url":"https://jira.atlassian.com/browse/BSERV-13522","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T13:40:06.623Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"atlassian","product":"bitbucket","defaultStatus":"unknown","versions":[{"version":"7.0.0","status":"affected","lessThan":"7.6.19","versionType":"custom"},{"version":"7.7.0","status":"affected","lessThan":"7.17.12","versionType":"custom"},{"version":"7.18.0","status":"affected","lessThan":"7.21.6","versionType":"custom"},{"version":"7.22.0","status":"affected","lessThan":"8.0.5","versionType":"custom"},{"version":"8.1.0","status":"affected","lessThan":"8.1.5","versionType":"custom"},{"version":"8.2.0","status":"affected","lessThan":"8.2.4","versionType":"custom"},{"version":"8.3.0","status":"affected","lessThan":"8.3.3","versionType":"custom"},{"version":"8.4.0","status":"affected","lessThan":"8.4.2","versionType":"custom"}],"cpes":["cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*"]}],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.8,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"HIGH","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}},{"other":{"type":"ssvc","content":{"timestamp":"2024-10-02T14:27:57.305026Z","id":"CVE-2022-43781","options":[{"Exploitation":"none"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-77","type":"CWE","lang":"en","description":"CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-10-02T14:56:09.693Z"}}]}}}