1. Home
  2. CVE Database
  3. CVE-2017-18038
MEDIUM · 5.3

CVE-2017-18038

The repository settings resource in Atlassian Bitbucket Server before version 5.6.0 allows remote attackers to read the first line of arbitrary files via a path traversal vulnerability through the def...

Vulnerability Description

The repository settings resource in Atlassian Bitbucket Server before version 5.6.0 allows remote attackers to read the first line of arbitrary files via a path traversal vulnerability through the default branch name.

CVSS Score

5.3

MEDIUM

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
AtlassianBitbucket< 5.6.0

Related Weaknesses (CWE)

CWE-22

References

FAQ

What is CVE-2017-18038?

CVE-2017-18038 is a vulnerability with a CVSS score of 5.3 (MEDIUM). The repository settings resource in Atlassian Bitbucket Server before version 5.6.0 allows remote attackers to read the first line of arbitrary files via a path traversal vulnerability through the def...

How severe is CVE-2017-18038?

CVE-2017-18038 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2017-18038?

Check the references section above for vendor advisories and patch information. Affected products include: Atlassian Bitbucket.