CVE-2022-36804

The Bitbucket Server and Bitbucket Data Center components have a command injection vulnerability, according to information recently discovered by the Sangfor security team. An attacker can submit malicious HTTP requests to execute arbitrary code and eventually get access to the server if they have read access to private or public Bitbucket repositories or access to public repositories with write access.

This repository contains payloads file and full POC for this vulnerability