Vulnerabilitycritical
Atlassian Releases Patches for Critical Flaws in Confluence and Bamboo
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-23531 | GuardDog: Versions prior to 0.1.5 are vulnerable to Relative Path Traversal when scanning a specially-crafted local PyPI package. Running… | 7.8 | <1% | ||
| CVE-2022-41903 | Git is distributed revision control system | 9.8 | 44% | ||
| CVE-2023-22501 | An authentication vulnerability was discovered in Jira Service Management Server and Data Center which allows an attacker to impersonate another user and gain… | 9.1 | 16% | ||
CVE-2023-22508+1 related CVE | This High severity RCE (Remote Code Execution) vulnerability known as CVE-2023-22508 was introduced in version 6.1.0 of Confluence Data Center & Server | 8.8 | 2% | ||
| CVE-2023-22506 | This High severity Injection and RCE (Remote Code Execution) vulnerability known as CVE-2023-22506 was introduced in version 8.0.0 of Bamboo Data Center | 8.8 | 2% |
From the original article
1 min read at thehackernews.com
Ravie Lakshmanan Jul 25, 2023 Server Security / Zero Day Atlassian has released updates to address three security flaws impacting its Confluence Server, Data Center, and Bamboo Data Center products that, if successfully exploited, could result in remote code execution on susceptible systems. CVE-2023-22505 (CVSS score: 8. 0) - RCE (Remote Code Execution) in Confluence Data Center and Server (Fixed in versions 8.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.