Showing results for 
Search instead for 
Did you mean: 
Sign up Log in

Next challenges

Recent achievements


  • Give kudos
  • My kudos


  • Global

Trophy case

Kudos (beta program)

Kudos logo

You've been invited into the Kudos (beta program) private group. Chat with others in the program, or give feedback to Atlassian.

View group

It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Bitbucket server and Datacenter security advisory 2019-09-18 - CVE-2019-15000

Every now and then a vulnerability is discovered in the tools we most often use and this is no exception for Atlassian applications. Recently a vulnerability was discovered in Bitbucket server and Datacenter where it is possible to gain control over the instance by injecting additional arguments into Git commands.

In scenarios like this, the key to success is to having a solid plan to mitigate the impact and fix it and this is all this article it's about, "I'm affected by this vulnerability, what now?!"

There are basically 3 ways to mitigate it and fix it:

  •  Disabling public access for the project or repository will prevent anonymous users to run arbitrary git commands;
  • Upgrade the instance to a version that has the fix;
  • Apply the zero downtime hotfix described in the security advisory article linked below;

Additional details about the vulnerability as well as details to apply the hotfix can be checked at the Bitbucket Server security advisory 2019-09-18 article.


Thanks for the Article!

Like Douglas Gnoato likes this

You are most welcome Merve. Glad to help :)


Log in or Sign up to comment
Community showcase
Published in Bitbucket

Powering DevOps with Bitbucket Server & Data Center

Hi everyone, The Cloud team recently announced 12 new DevOps features that help developers ship better code, faster   ! While we’re all excited about the new improvements to Bitbucket ...

1,922 views 0 7
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you