Gitbucket - Gitbucket - CRITICAL - CVE-2018-25332. GitBucket 4.23.1 is susceptible to an unauthenticated remote code execution vulnerability that can be exploited by attackers to execute arbitrary commands. This vulnerability arises from the use of weak secret token generation and insecure file upload functionality. Attackers may potentially brute-force the Blowfish encryption key and upload a malicious JAR plugin through the git-lfs endpoint. Furthermore, they can run system commands via another exposed exploit endpoint, compromising the security of the affected system. BADGES: 👾 EXPLOITED | 🟡 PoC | SecurityVulnerability.io