CVE-2017-14590
highpriority · track · 37EPSS 0.024 · 84 %ileEUUSEPSS · scored 2026-10-27
Bamboo did not check that the name of a branch in a Mercurial repository contained argument parameters. An attacker who has permission to create a repository in Bamboo, edit an existing plan that has a non-linked Mercurialrepository, create or edit a plan when there is at least one linked Mercurial repository that the attacker has permission to use, or commit to a Mercurial repository used by a Bamboo plan which has branch detection enabled can execute code of their choice on systems that run a vulnerable version of Bamboo Server. Versions of Bamboo starting with 2.7.0 before 6.1.6 (the fixed version for 6.1.x) and from 6.2.0 before 6.2.5 (the fixed version for 6.2.x) are affected by this vulnerability.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 8.3–9.1
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (4)
Products and version ranges known to be affected.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (9)
External citations — patches, advisories, analysis.
- https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2017-12-13-939939816.htmlcnnvd
- https://jira.atlassian.com/browse/BAM-18843cnnvd
- https://www.securityfocus.com/bid/102193cnnvd
- http://www.securityfocus.com/bid/102193enisa_euvd
- https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2017-12-13-939939816.htmlenisa_euvd
- https://jira.atlassian.com/browse/BAM-18843enisa_euvd
- http://www.securityfocus.com/bid/102193Third Party AdvisoryVDB Entrynvd
- https://confluence.atlassian.com/bamboo/bamboo-security-advisory-2017-12-13-939939816.htmlPatchVendor Advisorynvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan