Exploit / PoCcritical

Atlassian fixed critical flaws in Confluence and Crowd

Security Affairsby @securityaffairsFeb 21, 2025 · 08:02 UTC (Feb 21, 2025)1 min read4 · 1 read

Read at securityaffairs.com

Analyze CVE-2024-50379 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2024-50379 CVE-2024-56337 CVE-2024-52316

Tags: cve-2024-50379 cve-2024-56337 cve-2024-52316 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Published
CVE-2024-50379	TOCTOU Race Condition in Apache Tomcat JSP Compilation Enables RCE	9.8	44%	Dec 17, 2024
CVE-2024-52316	Unchecked Error Condition vulnerability in Apache Tomcat	9.8	6%	Nov 18, 2024
CVE-2024-56337	Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat	9.8	9%	Dec 20, 2024

From the original article

1 min read at securityaffairs.com

Australian software firm Atlassian patched 12 critical and high-severity flaws in Bamboo, Bitbucket, Confluence, Crowd, and Jira. Software firm Atlassian released security patches to address 12 critical- and high-severity vulnerabilities in Bamboo, Bitbucket, Confluence, Crowd, and Jira products. The most severe vulnerabilities addressed by the company are:

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.