CVE-2016-4320: Path Traversal
Published Apr 10, 2017
·Updated
Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull requests resource.
Affected Software
1 affected component
Atlassian Bitbucket<4.7.1
Event History
Apr 10, 2017
CVE Published
via MITRE·03:00 AM
Data Sourced
via MITRE·03:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2016-4320?
CVE-2016-4320 is classified as a high severity vulnerability due to its potential to allow unauthorized file access.
2
How do I fix CVE-2016-4320?
To fix CVE-2016-4320, update Atlassian Bitbucket Server to version 4.7.1 or later.
3
What type of attack does CVE-2016-4320 involve?
CVE-2016-4320 involves a directory traversal attack that allows unauthorized access to file contents.
4
Which versions of Atlassian Bitbucket are affected by CVE-2016-4320?
CVE-2016-4320 affects all versions of Atlassian Bitbucket Server prior to 4.7.1.
5
Can CVE-2016-4320 be exploited remotely?
Yes, CVE-2016-4320 can be exploited remotely by attackers without authentication.