Back to the CVE list
CVE-2022-36804 CISA KEV · Actively exploited

Atlassian Bitbucket Server and Data Center Command Injection Vulnerability

CVSS score

—

EPSS probability

%99.2

Risk score

—

Published

4 y ago

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

A real exploit for BitBucket RCE CVE-2022-36804 (★2)

Public PoCSource updated: 20.09.2022 01:14:37

Proof of Concept exploit for CVE-2022-36804 affecting BitBucket versions <8.3.1 (★2)

Public PoCSource updated: 20.09.2022 02:24:58

A simple PoC for Atlassian Bitbucket RCE [CVE-2022-36804] (★1)

Public PoCSource updated: 26.09.2022 02:29:15

A loader for bitbucket 2022 rce (cve-2022-36804) (★1)

Public PoCSource updated: 26.09.2022 19:43:00

A critical command injection vulnerability was found in multiple API endpoints of the Atlassian Bit bucket Server and Data center. This vulnerability affects all versions of Bitbucket Server and Data Center released before versions <7.6.17, <7.17.10, <7.21.4, <8.0.3, <8.1.2, <8.2.2, and <8.3.1 (★1)

Public PoCSource updated: 24.01.2023 03:27:24

Remote Code Execution exploit for CVE-2022-36804 (BitBucket Server and DataCenter). (★0)

Public PoCSource updated: 04.09.2022 01:06:17

A critical vulnerability (CVE-2022-36804) in Atlassian Bitbucket Server and Data Center could be exploited by unauthorized attackers to execute malicious code on vulnerable instances. (★0)

Public PoCSource updated: 05.09.2022 02:03:13

A critical vulnerability (CVE-2022-36804) in Atlassian Bitbucket Server and Data Center could be exploited by unauthorized attackers to execute malicious code on vulnerable instances. (★0)

Public PoCSource updated: 10.09.2022 18:07:58

A critical vulnerability (CVE-2022-36804) in Atlassian Bitbucket Server and Data Center could be exploited by unauthorized attackers to execute malicious code on vulnerable instances. (★0)

Public PoCSource updated: 16.09.2022 19:14:26

A critical vulnerability (CVE-2022-36804) in Atlassian Bitbucket Server and Data Center could be exploited by unauthorized attackers to execute malicious code on vulnerable instances. (★0)

Public PoCSource updated: 23.09.2022 17:42:48

Somewhat Reliable PoC Exploit for CVE-2022-36804 (BitBucket Critical Command Injection) (★0)

Public PoCSource updated: 20.09.2022 11:37:20

CVE-2022-36804 Atlassian Bitbucket Command Injection Vulnerability (★0)

Public PoCSource updated: 20.09.2022 19:08:47

Proof of Concept exploit for CVE-2022-36804 affecting BitBucket versions <8.3.1 (★0)

Public PoCSource updated: 20.09.2022 19:51:55

A critical vulnerability (CVE-2022-36804) in Atlassian Bitbucket Server and Data Center could be exploited by unauthorized attackers to execute malicious code on vulnerable instances. (★0)

Public PoCSource updated: 23.09.2022 01:22:31

Bitbucket CVE-2022-36804 unauthenticated remote command execution (★0)

Public PoCSource updated: 21.09.2022 19:36:50

Bitbucket v7.0.0 - RCE

Exploit referenceSource updated: 23.03.2023 00:00:00

Nuclei: Atlassian Bitbucket - Remote Command Injection

Exploit reference

asepsaepdin/CVE-2022-36804

Public PoC

Somewhat Reliable PoC Exploit for CVE-2022-36804 (BitBucket Critical Command Injection)

Public PoC

Full-chain reproduction of CVE-2022-36804 (Bitbucket RCE). Includes a Dockerized laboratory, pspy64 monitoring for null-byte injection verification, and a custom Bash exploit script. Based on Assetnote research.

Public PoC

imbas007/Atlassian-Bitbucket-CVE-2022-36804

Public PoC

CVE-2022-36804 Bitbucket command execution and file transfer tool

Public PoC

A loader for bitbucket 2022 rce (cve-2022-36804)

Public PoC

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2022-36804"