CVE-2020-14170: Atlassian Bitbucket

Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days.

Webhooks in Atlassian Bitbucket Server from version 5.4.0 before version 7.3.1 allow remote attackers to access the content of internal network resources via a Server-Side Request Forgery (SSRF) vulnerability.

Affected products

• Atlassian Bitbucket: from 5.4.0, before 7.3.1 (fixed in 7.3.1)

Published 2020-07-09. Last modified 2026-06-17.