Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2022-36804 PoC — Atlassian Bitbucket Server 安全漏洞

Source
https://github.com/khal4n1/CVE-2022-36804
Associated Vulnerability
Title:Atlassian Bitbucket Server 安全漏洞 (CVE-2022-36804)
Description:Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8.0.0 before version 8.0.3, from version 8.1.0 before version 8.1.3, and from version 8.2.0 before version 8.2.2, and from version 8.3.0 before 8.3.1 allows remote attackers with read permissions to a public or private Bitbucket repository to execute arbitrary code by sending a malicious HTTP request. This vulnerability was reported via our Bug Bounty Program by TheGrandPew.
Description
You can find a python script to exploit the vulnerability on Bitbucket related CVE-2022-36804.
Readme
# CVE-2022-36804
You can find a python script to exploit the vulnerability on Bitbucket related CVE-2022-36804.
                                                                                                                        
                         
                                       .,;;.                                    
                                      .:lll:.                                   
                                     'clllllc.                                  
                                    ,llolllooc'                                 
                                   'loooooooool,                                
                                   .;ooooooooooo;.                              
                                .:;..;odddddddddo:.                             
                               'ldo:. ,llccoddddddc.                            
                              ,oddddc. .. .:dddddddl'                           
                            .;dxxxxxxc.    .;dxxxxxxo,                          
                           .:dxxxxxxo'       ,dxxxxxxd;                         
                          .cxxxxxxxl.         'oxxxxxxx:.                       
                         .okkkkkkxl.           'okkkkkkxc.                      
                        'dkkkkkkxc.             .lkkkkkkko.                     
                       ;dkOkOOOx:.               .,;;;;;;;.                     
                     .:xOOOOOOx:                   .',,,,,,,.                   
                    .ckOOOOOOOo,.  .''''''''''''''':dOOOOOOOk:                  
                   .lO0O000000kc..ckOOOOOOOOOOOOOOOOO00000000kc.                
                  .d000000000Oc..lO000000000000000000000000000Ol.               
                 ,x000000000k:..d0000000000000000000000000000000d.              
                .;lllllllllc,  ,lllllllllllllllllllllllllllllllll,  
                                                                                                                                               
                         _   ___           _   ___       __  
                        | | / / |         | | /   |     /  | 
                        | |/ /| |__   __ _| |/ /| |_ __ `| | 
                        |    \| '_ \ / _` | / /_| | '_ \ | | 
                        | |\  \ | | | (_| | \___  | | | || |_
                        \_| \_/_| |_|\__,_|_|   |_/_| |_\___/
File Snapshot

 [4.0K]  /data/pocs/ee704bfc968e4717cff7026fda9a5dca7864fe89
├── [2.2K]  mexploit.py
└── [2.4K]  README.md

0 directories, 2 files
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →