CVE-2020-14170

4.3 mediumEPSS 0.8%

Medium (4.3) in atlassian bitbucket. EPSS 0.8% chance of exploitation in the next 30 days.

Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the content of internal network resources via a Server-Side Request Forgery (SSRF) vulnerability.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 57% of CVEs (scores of 2026-10-31)
CWE: CWE-918
Published: 2020-07-09
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

atlassian:bitbucket

References

https://jira.atlassian.com/browse/BSERV-12433
https://jira.atlassian.com/browse/BSERV-12433

Check your stack JSON