Breaking Bitbucket: Pre Auth Remote Command Execution [CVE-2022-36804]
Two argument injections that were found in Bitbucket server, though only one of them was exploitable.The first was in the `/rest/api/latest/projects/~USER/repos/repo1/browse` endpoint, where an `at` parameter could be provided...