All vulnerabilities

Servers and applications

CVE-2024-21684

There is a low severity open redirect vulnerability within affected versions of Bitbucket Data Center. Versions of Bitbucket DC from 8.0.0 to 8.9.12 and 8.19.0 to 8.19.1 are affected by this vulnerability. It is patched in 8.9.13 and 8.19.2. This open redirect vulnerability, with a CVSS Score of 3.1 and a CVSS Vector of CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N, allows an unauthenticated…

Severity
Medium 4.3
Published
24 Jul 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
8.9.13, 8.19.2
Sources
NVD

Affected software

SoftwareAffected versions
Bitbucket Data CenterServers and applications · cpe:a:atlassian:bitbucket_data_center
  • From 8.0.0 before 8.9.13
  • From 8.19.0 before 8.19.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-21684
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-21684