VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Jun 3, 2019· Updated Jun 17, 2026

CVE-2019-3397

CVE-2019-3397

Description

Atlassian Bitbucket Data Center licensed instances starting with version 5.13.0 before 5.13.6 (the fixed version for 5.13.x), from 5.14.0 before 5.14.4 (fixed version for 5.14.x), from 5.15.0 before 5.15.3 (fixed version for 5.15.x), from 5.16.0 before 5.16.3 (fixed version for 5.16.x), from 6.0.0 before 6.0.3 (fixed version for 6.0.x), and from 6.1.0 before 6.1.2 (the fixed version for 6.1.x) allow remote attackers who have admin permissions to achieve remote code execution on a Bitbucket server instance via path traversal through the Data Center migration tool.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Atlassian/Bitbucket Data Centerllm-fuzzy2 versions
    >=5.13.0 <5.13.6, >=5.14.0 <5.14.4, >=5.15.0 <5.15.3, >=5.16.0 <5.16.3, >=6.0.0 <6.0.3, >=6.1.0 <6.1.2+ 1 more
    • (no CPE)range: >=5.13.0 <5.13.6, >=5.14.0 <5.14.4, >=5.15.0 <5.15.3, >=5.16.0 <5.16.3, >=6.0.0 <6.0.3, >=6.1.0 <6.1.2
    • (no CPE)range: 5.13.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.