CVE-2018-5224

published 2018-03-29

CVE-2018-5224: Bamboo did not correctly check if a configured Mercurial repository URI contained values that the Windows operating system may consider argument parameters. An…

Priority P3 52 high 8.8 CVSS 3.0

AV N AC L PR L UI N S U C H I H A H

Bamboo did not correctly check if a configured Mercurial repository URI contained values that the Windows operating system may consider argument parameters. An attacker who has permission to create a repository in Bamboo, edit an existing plan in Bamboo that has a non-linked Mercurial repository, or create a plan in Bamboo either globally or in a project using Bamboo Specs can can execute code of their choice on systems that run a vulnerable version of Bamboo on the Windows operating system. All versions of Bamboo starting with 2.7.0 before 6.3.3 (the fixed version for 6.3.x) and from version 6.4.0 before 6.4.1 (the fixed version for 6.4.x) running on the Windows operating system are affected by this vulnerability.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
atlassian	bamboo	>= 2.7.0 < 6.3.3	6.3.3
atlassian	bamboo	>= 2.7.1 < unspecified	unspecified
atlassian	bamboo	>= 6.4.0 < unspecified	unspecified
atlassian	bamboo	>= 6.4.0 < 6.4.1	6.4.1
atlassian	bamboo	>= unspecified < 6.3.3	6.3.3
atlassian	bamboo	>= unspecified < 6.4.1	6.4.1

CVSS provenance

nvd v3.0 8.8 HIGH CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 9.0 CRITICAL AV:N/AC:L/Au:S/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-20