CVE-2022-43781

Related Files

Bitbucket Environment Variable Remote Command Injection

Posted Mar 16, 2023

Authored by Shelby Pace, Y4er, Ry0taK | Site metasploit.com

For various versions of Bitbucket, there is an authenticated command injection vulnerability that can be exploited by injecting environment variables into a user name. This module achieves remote code execution as the atlbitbucket user by injecting the GIT_EXTERNAL_DIFF environment variable, a null character as a delimiter, and arbitrary code into a user's user name. The value (payload) of the GIT_EXTERNAL_DIFF environment variable will be run once the Bitbucket application is coerced into generating a diff. This Metasploit module requires at least admin credentials, as admins and above only have the option to change their user name.

tags | exploit, remote, arbitrary, code execution

advisories | CVE-2022-43781

SHA-256 | 2e6c2f7e0c503ac745181fc0724f59c7184beaea61b5d14bb0460c6ed729952c

Download | Favorite | View