{
  "Name": "Bitbucket Data Center Unauthenticated Remote Code Execution Vulnerability (CVE-2022-26133)",
  "Description": "<p>Atlassian Bitbucket Data Center is Atlassian's Git repository management solution that provides source code collaboration for enterprises that require high availability and performance at scale.</p><p>This vulnerability is caused by a deserialization vulnerability because the Hazelcast interface function in Atlassian Bitbucket Data Center does not filter user data effectively. An attacker can exploit this vulnerability to construct malicious data to execute arbitrary code remotely.</p>",
  "Product": "bitbucket",
  "Homepage": "https://www.atlassian.com/zh/software/bitbucket/enterprise",
  "DisclosureDate": "2022-04-15",
  "Author": "sharecast.net@gmail.com",
  "FofaQuery": " body=\"com.atlassian.plugins.atlassian-plugins-webresource-plugin:context-path.context-path\" || title=\"Atlassian Bitbucket\"",
  "GobyQuery": " body=\"com.atlassian.plugins.atlassian-plugins-webresource-plugin:context-path.context-path\" || title=\"Atlassian Bitbucket\"",
  "Level": "3",
  "Impact": "<p>Attackers can use this vulnerability to arbitrarily execute code on the server side, write backdoors, obtain server permissions, and then control the entire web server.<br></p>",
  "Recommendation": "<p>The latest official version has been released, and affected users are advised to update and upgrade to the latest version in time. The link is as follows:</p><p><a href=\"https://www.atlassian.com/software/bitbucket/download-archives\">https://www.atlassian.com/software/bitbucket/download-archives</a></p>",
  "References": [
    "https://github.com/snowyyowl/writeups/tree/main/CVE-2022-26133"
  ],
  "Is0day": false,
  "HasExp": true,
  "ExpParams": [
    {
	  "name": "AttackType",
	  "type": "select",
	  "value": "goby_shell_linux"
   }
  ],
  "ExpTips": {
    "Type": "",
    "Content": ""
  },
  "ScanSteps": null,
  "ExploitSteps": null,
  "Tags": [
    "rce"
  ],
  "VulType": [
    "rce"
  ],
  "CVEIDs": [
    "CVE-2022-26133"
  ],
  "CNNVD": [
    ""
  ],
  "CNVD": [
    ""
  ],
  "CVSSScore": "9.8",
  "Translation": {
    "CN": {
      "Name": "Bitbucket Data Center 未认证远程代码执行漏洞（CVE-2022-26133）",
      "Product": "bitbucket",
      "Description": "<p>Atlassian Bitbucket Data Center 是 Atlassian 的 Git 存储库管理解决方案，其为需要高可用性和大规模性能的企业提供源代码协作。</p><p>该漏洞是由于 Atlassian Bitbucket Data Center 中的 Hazelcast 接口功能未对用户数据进行有效过滤，导致存在反序列化漏洞而引起的。攻击者利用该漏洞可以构造恶意数据远程执行任意代码。<br></p>",
      "Recommendation": "<p>当前官方已发布最新版本，建议受影响的用户及时更新升级到最新版本。链接如下：</p><p><a href=\"https://www.atlassian.com/software/bitbucket/download-archives\">https://www.atlassian.com/software/bitbucket/download-archives</a></p><p></p><p><a href=\"https://www.eq-3.de\"></a></p><p><a target=\"_Blank\" href=\"https://github.com/getgrav/grav-plugin-admin/security/advisories/GHSA-6f53-6qgv-39pj\"></a></p><p></p><p><a href=\"https://github.com/getgrav/grav-plugin-admin/security/advisories/GHSA-6f53-6qgv-39pj\"></a></p>",
      "Impact": "<p>攻击者可通过该漏洞在服务器端任意执行代码，写入后门，获取服务器权限，进而控制整个web服务器。<br></p>",
      "VulType": [
        "代码执⾏"
      ],
      "Tags": [
        "代码执⾏"
      ]
    },
    "EN": {
      "Name": "Bitbucket Data Center Unauthenticated Remote Code Execution Vulnerability (CVE-2022-26133)",
      "Product": "bitbucket",
      "Description": "<p>Atlassian Bitbucket Data Center is Atlassian's Git repository management solution that provides source code collaboration for enterprises that require high availability and performance at scale.</p><p>This vulnerability is caused by a deserialization vulnerability because the Hazelcast interface function in Atlassian Bitbucket Data Center does not filter user data effectively. An attacker can exploit this vulnerability to construct malicious data to execute arbitrary code remotely.</p>",
      "Recommendation": "<p>The latest official version has been released, and affected users are advised to update and upgrade to the latest version in time. The link is as follows:</p><p><a href=\"https://www.atlassian.com/software/bitbucket/download-archives\">https://www.atlassian.com/software/bitbucket/download-archives</a></p>",
      "Impact": "<p>Attackers can use this vulnerability to arbitrarily execute code on the server side, write backdoors, obtain server permissions, and then control the entire web server.<br></p>",
      "VulType": [
        "Code Execution"
      ],
      "Tags": [
        "Code Execution"
      ]
    }
  },
  "AttackSurfaces": {
    "Application": null,
    "Support": null,
    "Service": null,
    "System": null,
    "Hardware": null
  }
}