CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.8. It affects Java. Its EPSS score suggests a 71.1% probability of exploitation in the next 30 days. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2022-26133
Severity
CRITICAL
CVSS
9.8
EPSS
71.09%
Java
Original NVD Description
SharedSecretClusterAuthenticator in Atlassian Bitbucket Data Center versions 5.14.0 and later before 7.6.14, 7.7.0 and later prior to 7.17.6, 7.18.0 and later prior to 7.18.4, 7.19.0 and later prior to 7.19.4, and 7.20.0 allow a remote, unauthenticated attacker to execute arbitrary code via Java deserialization.
Related CVEs
Other vulnerabilities affecting the same vendor(s)