Are you in the loop? Keep up with the latest by making sure you're subscribed to Community Announcements. Just click Watch and select Articles.

Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Earn badges and make progress

You're on your way to the next level! Join the Kudos program to earn points and save your progress.

Deleted user Avatar
Deleted user

Level 1: Seed

25 / 150 points

Next: Root


1 badge earned


Participate in fun challenges

Challenges come and go, but your rewards stay with you. Do more to earn more!


Gift kudos to your peers

What goes around comes around! Share the love by gifting kudos to your peers.


Rise up in the ranks

Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!


Bitbucket server and Datacenter security advisory 2019-09-18 - CVE-2019-15000

Every now and then a vulnerability is discovered in the tools we most often use and this is no exception for Atlassian applications. Recently a vulnerability was discovered in Bitbucket server and Datacenter where it is possible to gain control over the instance by injecting additional arguments into Git commands.

In scenarios like this, the key to success is to having a solid plan to mitigate the impact and fix it and this is all this article it's about, "I'm affected by this vulnerability, what now?!"

There are basically 3 ways to mitigate it and fix it:

  •  Disabling public access for the project or repository will prevent anonymous users to run arbitrary git commands;
  • Upgrade the instance to a version that has the fix;
  • Apply the zero downtime hotfix described in the security advisory article linked below;

Additional details about the vulnerability as well as details to apply the hotfix can be checked at the Bitbucket Server security advisory 2019-09-18 article.


Merve Nur Bas
Rising Star
Rising Star
Rising Stars are recognized for providing high-quality answers to other users. Rising Stars receive a certificate of achievement and are on the path to becoming Community Leaders.
Sep 19, 2019 • edited

Thanks for the Article!

Like Douglas Gnoato likes this
Douglas Gnoato
Atlassian Team
Atlassian Team members are employees working across the company in a wide variety of roles.
Sep 19, 2019

You are most welcome Merve. Glad to help :)


Log in or Sign up to comment
AUG Leaders

Atlassian Community Events