CVE-2016-4320

Published: Apr 10, 2017

Modified: Aug 6, 2024

PUBLISHED

Description

Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull requests resource.

Vendor	Product	Versions
n/a	Atlassian Bitbucket Server before 4.7.1	affected `Atlassian Bitbucket Server before 4.7.1`

References

https://jira.atlassian.com/browse/BSERV-8819

x_refsource_MISC

97515

vdb-entry

x_refsource_BID

https://confluence.atlassian.com/bitbucketserver/bitbucket-server-4-7-release-notes-829052416.html

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2016-4320

Description

Affected Products

References