CVE-2024-22259
This High severity vulnerability known as CVE-2024-22259 was introduced in 8.3.0, 8.3.1, 8.3.2, 8.3.3, 8.3.4, 8.4.0, 8.4.1, 8.4.2, 8.4.3, 8.4.4, 8.5.0, 8.5.1, 8.5.2, 8.5.3, 8.5.4, 8.6.0, 8.6.1, 8.6.2, 8.6.3, 8.6.4, 8.7.0, 8.7.1, 8.7.2, 8.7.3, 8.7.4, 8.8.0, 8.8.1, 8.8.2, 8.8.3, 8.8.4, 8.8.5, 8.9.0, 8.9.1, 8.9.2, 8.10.0, 8.10.1, 8.10.2, 8.11.0, 8.11.1, 8.12.0, 8.7.5, 8.8.6, 8.9.3, 8.10.3, 8.11.2, 8.8.7, 8.9.4, 8.10.4, 8.11.3, 8.12.1, 8.13.0, 8.14.0, 8.13.1, 8.9.5, 8.10.5, 8.11.4, 8.12.2, 8.15.0, 8.9.6, 8.10.6, 8.11.5, 8.12.3, 8.13.2, 8.14.1, 8.16.0, 8.9.7, 8.11.6, 8.12.4, 8.13.3, 8.14.2, 8.15.1, 8.9.8, 8.12.5, 8.13.4, 8.14.3, 8.15.2, 8.17.0, 8.16.1, 8.14.0-eap01, 8.16.2, 8.9.9, 8.12.6, 8.13.5, 8.14.4, 8.15.3, 8.18.0, 8.9.10, 8.13.6, 8.17.1, 8.14.5, 8.15.4, 8.16.3, 8.19.0, 8.9.11, 8.14.6, 8.15.5, 8.16.4, 8.17.2, 8.18.1, 8.19.1, 8.19.2, 8.19.3, 8.19.4, 8.19.5, 8.19.6 of Bitbucket Data Center and Server. This vulnerability with a CVSS Score of 8.1 and a CVSS Vector of CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N Atlassian recommends that Bitbucket Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions: * Bitbucket Data Center and Server 8.19: Upgrade to a release greater than or equal to 8.19.25 See the release notes. You can download the latest version of Bitbucket Data Center and Server from the download center.
EPSS 56.40% · 98.2th percentile
Risk Scores
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Atlassian | Bamboo Data Center | |
| Atlassian | Confluence Server | |
| Atlassian | Bamboo Server | |
| Atlassian | Bitbucket Data Center | |
| Atlassian | Crowd Server | |
| Atlassian | Confluence Data Center | |
| Atlassian | Crowd Data Center | |
| Atlassian | Bitbucket Server |
Exploit Intelligence
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog (certbund)
- dependency-check-suppress.xml (github-poc)
- dependency-check-suppress.xml (github-poc)
- dependency-check-suppress.xml (github-poc)
- dependency-check-suppress.xml (github-poc)
- dependency-check-suppress.xml (github-poc)
- dependency-check-suppress.xml (github-poc)
- dependency-check-suppress.xml (github-poc)
- dependency-check-suppress.xml (github-poc)
- dependency-check-suppress.xml (github-poc)
…and 11 more exploits
Timeline
- Mar 14, 2024 CVE Published
- Mar 16, 2024 EPSS Score
- Oct 4, 2024 Coalition ESS Score
- Feb 11, 2025 Coalition ESS Score
- Mar 2, 2025 Coalition ESS Score
- Mar 5, 2025 Coalition ESS Score
- Mar 13, 2025 Coalition ESS Score
- Mar 17, 2025 EPSS Score
- Mar 19, 2025 EPSS Score
- Mar 20, 2025 EPSS Score
- Mar 22, 2025 Coalition ESS Score
- Mar 23, 2025 Coalition ESS Score