CVE-2016-4320
MEDIUMAtlassian Bitbucket Server <4.7.1 - Path Traversal
Title source: llmDescription
Atlassian Bitbucket Server before 4.7.1 allows remote attackers to read the first line of an arbitrary file via a directory traversal attack on the pull requests resource.
Scores
CVSS v3
4.3
EPSS
0.0061
EPSS Percentile
69.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Classification
CWE
CWE-22
Status
published
Affected Products (2)
atlassian/bitbucket
< 4.7.1
n/a/Atlassian Bitbucket Server before 4.7.1
< Atlassian Bitbucket Server before 4.7.1
Timeline
Published
Apr 10, 2017
Tracked Since
Feb 18, 2026