SSRF in Atlassian Bitbucket Server

CVE-2017-18036

The Github repository importer in Atlassian Bitbucket Server before version 5.3.0 allows remote attackers to determine if a service they could not otherwise reach has open ports via a Server Side Request Forgery (SSRF) vulnerability.

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.002 (35.3th percentile) — read the EPSS interpretation.