#JiraSecurity

Atlassian Patches Vulnerabilities in Bamboo, Confluence, Crowd, Jira

by

August 22, 2024 at 08:45AM Atlassian’s August 2024 security bulletin outlines nine high-severity vulnerabilities affecting Bamboo, Confluence, Crowd, and Jira products. Patches have been released for issues such as remote code execution, denial-of-service, cross-site scripting, and server-side request forgery. The company advises users to promptly update their installations to address these vulnerabilities. Based on the … Read more

Atlassian Patches High-Severity Vulnerabilities in Confluence, Crucible, Jira

by

June 20, 2024 at 06:58AM Atlassian released software updates addressing high-severity vulnerabilities in Confluence, Crucible, and Jira. The Confluence update resolves six security defects, including broken access control and server-side request forgery flaws. Crucible versions 4.8.15 and higher address a deserialization vulnerability, while Jira updates fix an information disclosure issue. No known exploitation of these … Read more