CVE-2018-5225

CriticalCVSS 9.9/10Last modified Jun 17, 2026

Description

In browser editing in Atlassian Bitbucket Server from version 4.13.0 before 5.4.8 (the fixed version for 4.13.0 through 5.4.7), 5.5.0 before 5.5.8 (the fixed version for 5.5.x), 5.6.0 before 5.6.5 (the fixed version for 5.6.x), 5.7.0 before 5.7.3 (the fixed version for 5.7.x), and 5.8.0 before 5.8.2 (the fixed version for 5.8.x), allows authenticated users to gain remote code execution using the in browser editing feature via editing a symbolic link within a repository.

Metrics

CVSS 3.0 9.9/10CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
Atlassian	Bitbucket Server	>= 4.13.0, < unspecified; >= unspecified, < 5.4.8; >= 5.5.0, < unspecified; >= unspecified, < 5.5.8; >= 5.6.0, < unspecified; >= unspecified, < 5.6.5; >= 5.7.0, < unspecified; >= unspecified, < 5.7.3; >= 5.8.0, < unspecified; >= unspecified, < 5.8.2

References

http://www.securityfocus.com/bid/103488Third Party Advisory, VDB Entry
https://confluence.atlassian.com/x/3WNsOVendor Advisory
https://jira.atlassian.com/browse/BSERV-10684Vendor Advisory
http://www.securityfocus.com/bid/103488Third Party Advisory, VDB Entry
https://confluence.atlassian.com/x/3WNsOVendor Advisory
https://jira.atlassian.com/browse/BSERV-10684Vendor Advisory

Timeline

Published: Mar 22, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-52268.8There was an argument injection vulnerability in Sourcetree for Windows via Mercurial repository tag name that is going to be deleted. An at CVE-2018-52274.8Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administra CVE-2018-52286.1The /browse/~raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScr CVE-2018-52295.4The NotificationRepresentationFactoryImpl class in Atlassian Universal Plugin Manager before version 2.22.9 allows remote attackers to injec CVE-2018-52306.1The issue collector in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4 CVE-2018-52317.5The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before v CVE-2018-52326.1The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows remote attackers to i CVE-2018-52336.1Cross-site scripting (XSS) vulnerability in system/src/Grav/Common/Twig/Twig.php in Grav CMS before 1.3.0 allows remote attackers to inject CVE-2018-52348.0The Norton Core router prior to v237 may be susceptible to a command injection exploit. This is a type of attack in which the goal is execut CVE-2018-52356.0Norton Utilities (prior to 16.0.3.44) may be susceptible to a DLL Preloading vulnerability, which is a type of issue that can occur when an CVE-2018-52365.3Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 may be susceptible to a race condition (or race hazard). This type of issu CVE-2018-52378.8Symantec Endpoint Protection prior to 14 RU1 MP1 or 12.1 RU6 MP10 could be susceptible to a privilege escalation vulnerability, which is a t