CERT-In issues alerts for vulnerabilities in Google Chrome OS, TP-link router and Atlassian Bitbucket Server and Data Center

CERT-In on Thursday released notes for high severity vulnerabilities in Google Chrome OS, and critical vulnerabilities in TP-Link router and Bitbucket Server and Data Center. In Google Chrome OS Multiple vulnerabilities in Google Chrome OS LTS channel version have been reported due to use after free in Blink, browser creation, webUI, managed devices API and Chrome OS shell. In Bitbucket Server and Data Center A critical vulnerability has been reported in all versions of Atlassian Bitbucket Server and Data Center between 7.0.0 and 8.3.0. The vulnerability exists due to multiple API endpoints and can be exploited by sending a specially crafted HTTP request to execute arbitrary commands on the affected systems.