← Back

Bitbucket Auto Unapprove Plugin

bitbucket_auto_unapprove_plugin

Vendor: Atlassian • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2017-16857
1Atlassian
1Bitbucket Auto Unapprove Plugin
May 13, 2026
Dec 5, 2017
N/A· v4
8.5 HIGH· v3
6.0 MEDIUM· v2
It is possible to bypass the bitbucket auto-unapprove plugin via minimal brute-force because it is relying on asynchronous events on the back-end. This allows an attacker to merge any code into unsuspecting repositories....Show more
It is possible to bypass the bitbucket auto-unapprove plugin via minimal brute-force because it is relying on asynchronous events on the back-end. This allows an attacker to merge any code into unsuspecting repositories. This affects all versions of the auto-unapprove plugin, however since the auto-unapprove plugin is not bundled with Bitbucket Server it does not affect any particular version of Bitbucket.Show less