cveboard RSS feed

CVE-2017-18037

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2017
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

The git repository tag rest resource in Atlassian Bitbucket Server from version 3.7.0 before 4.14.11 (the fixed version for 4.14.x), from version 5.0.0 before 5.0.9 (the fixed version for 5.0.x), from version 5.1.0 before 5.1.8 (the fixed version for 5.1.x), from version 5.2.0 before 5.2.6 (the fixed version for 5.2.x), from version 5.3.0 before 5.3.4 (the fixed version for 5.3.x), from version 5.4.0 before 5.4.2 (the fixed version for 5.4.x), from version 5.5.0 before 5.5.1 (the fixed version for 5.5.x) and before 5.6.0 allows remote attackers to read arbitrary files via a path traversal vulnerability through the name of a git tag.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

Bitbucket Server

Vendor
Atlassian
Product
Bitbucket Server
Platforms
Unknown
Default status
Unknown
Bitbucket Server · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
from 3.7.0 prior to 4.14.11affectedUnavailableUnavailableUnavailableNone listed
from 5.0.0 prior to 5.0.9affectedUnavailableUnavailableUnavailableNone listed
from 5.1.0 prior to 5.1.8affectedUnavailableUnavailableUnavailableNone listed
from 5.2.0 prior to 5.2.6affectedUnavailableUnavailableUnavailableNone listed
from 5.3.0 prior to 5.3.4affectedUnavailableUnavailableUnavailableNone listed
from 5.4.0 prior to 5.4.2affectedUnavailableUnavailableUnavailableNone listed
from 5.5.0 prior to 5.5.1affectedUnavailableUnavailableUnavailableNone listed