Sigma high test sigma

Atlassian Bitbucket Command Injection Via Archive API

Detects attempts to exploit the Atlassian Bitbucket Command Injection CVE-2022-36804

View Source

Detection Logic

{
  "selection": {
    "cs-uri-query
| contains
| all": [
      "/rest/api/latest/projects/",
      "prefix=",
      "%00--exec"
    ]
  },
  "condition": "selection"
}

False Positives

  • ⚠ Web vulnerability scanners

Field Validations

Loading…

Comments (0)

Loading comments...