CVE-2016-4320

published 2017-04-10

CVE-2016-4320: Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull…

medium 4.3 CVSS 3.0

AV N AC L PR L UI N S U C L I N A N

Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull requests resource.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
atlassian	bitbucket	< 4.7.1	4.7.1

CWE-22