medium4.3
CVE-2016-4320
Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull reques…
Impact
Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull requests resource.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Bitbucket | before 4.7.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/97515
- https://confluence.atlassian.com/bitbucketserver/bitbucket-server-4-7-release-notes-829052416.html
- https://jira.atlassian.com/browse/BSERV-8819
- http://www.securityfocus.com/bid/97515
- https://confluence.atlassian.com/bitbucketserver/bitbucket-server-4-7-release-notes-829052416.html
- https://jira.atlassian.com/browse/BSERV-8819