CVE-2017-14590

CVE-2017-14590 is a critical code execution vulnerability affecting Atlassian Bamboo versions 2.7.0 through 6.1.5 and 6.2.0 through 6.2.4. The flaw stems from Bamboo's failure to properly validate branch names in Mercurial repositories, allowing authenticated attackers with specific permissions to inject arbitrary code. With a CVSS score of 9.1 (CRITICAL), this vulnerability presents a high risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the potential for severe impact necessitates immediate patching.