Remote Code Execution (RCE) via certain user input fields - CVE-2019-15010

Question

I cannot access my bit-bucket admin account. Says wrong username or password.

Does it have anything to do with CVE-2019-15010

Can somebody change the admin Password with this vulnerability.

Theekshana Wickramatilake · Answer

Just FYI Its hosted in one of my servers. I was able to reset it. but I am 100% sure about the login info since its saved in my browser.

Nic Brough -Adaptavist- · Answer

No, they can't, you'll need to reset the admin password that you have lost/forgotten