Atlassian Bitbucket Server CVE-2018-5225 Remote Code Execution Vulnerability

Bugtraq ID:	103488
Class:	Design Error
CVE:	CVE-2018-5225
Remote:	Yes
Local:	No
Published:	Mar 22 2018 12:00AM
Updated:	Mar 22 2018 12:00AM
Credit:	The vendor reported this issue.
Vulnerable:	Atlassian Bitbucket Server 5.8.1 Atlassian Bitbucket Server 5.8 Atlassian Bitbucket Server 5.7.2 Atlassian Bitbucket Server 5.7.1 Atlassian Bitbucket Server 5.7 Atlassian Bitbucket Server 5.6.4 Atlassian Bitbucket Server 5.6.3 Atlassian Bitbucket Server 5.6.1 Atlassian Bitbucket Server 5.6 Atlassian Bitbucket Server 5.5.7 Atlassian Bitbucket Server 5.5.6 Atlassian Bitbucket Server 5.5.5 Atlassian Bitbucket Server 5.5 Atlassian Bitbucket Server 5.4.7 Atlassian Bitbucket Server 5.4.6 Atlassian Bitbucket Server 5.4.1 Atlassian Bitbucket Server 5.4 Atlassian Bitbucket Server 5.3.7 Atlassian Bitbucket Server 5.3.3 Atlassian Bitbucket Server 5.3.2 Atlassian Bitbucket Server 5.3.1 Atlassian Bitbucket Server 5.3 Atlassian Bitbucket Server 5.2.8 Atlassian Bitbucket Server 5.2.7 Atlassian Bitbucket Server 5.2.6 Atlassian Bitbucket Server 5.2.5 Atlassian Bitbucket Server 5.2.4 Atlassian Bitbucket Server 5.2.3 Atlassian Bitbucket Server 5.2.2 Atlassian Bitbucket Server 5.2.1 Atlassian Bitbucket Server 5.2 Atlassian Bitbucket Server 5.1.7 Atlassian Bitbucket Server 5.1.6 Atlassian Bitbucket Server 5.1.2 Atlassian Bitbucket Server 5.1.1 Atlassian Bitbucket Server 5.1 Atlassian Bitbucket Server 4.14.12 Atlassian Bitbucket Server 4.14 Atlassian Bitbucket Server 4.13.1 Atlassian Bitbucket Server 4.13
Not Vulnerable:	Atlassian Bitbucket Server 5.9 Atlassian Bitbucket Server 5.8.2 Atlassian Bitbucket Server 5.7.3 Atlassian Bitbucket Server 5.6.5 Atlassian Bitbucket Server 5.5.8 Atlassian Bitbucket Server 5.4.8

Atlassian Bitbucket Server CVE-2018-5225 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.