Vulnerabilityhigh
Atlassian fixed six high
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-25647 | The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which… | 7.5 | 12% | ||
| CVE-2024-21685 | This High severity Information Disclosure vulnerability was introduced in versions 9.4.0, 9.12.0, and 9.15.0 of Jira Core Data Center | 6.5 | <1% | ||
| CVE-2024-22243 | Applications that use UriComponentsBuilder to parse an externally provided URL (e.g | 8.1 | 4% | ||
| CVE-2024-22257 | In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior… | 8.2 | <1% | ||
| CVE-2024-22259 | Applications that use UriComponentsBuilder in Spring Framework to parse an externally provided URL (e.g | 8.1 | 3% | ||
| CVE-2024-22262 | Applications that use UriComponentsBuilder to parse an externally provided URL (e.g | 8.1 | 1% | ||
CVE-2024-29131+1 related CVE | Out-of-bounds Write vulnerability in Apache Commons Configuration.This issue affects Apache Commons Configuration | 7.3 group max | 2% |
From the original article
2 min read at securityaffairs.comAustralian software company Atlassian addressed multiple high-severity vulnerabilities in its Confluence, Crucible, and Jira solutions. Atlassian June 2024 Security Bulletin addressed nine high-severity vulnerabilities in Confluence, Crucible, and Jira products. The most severe issue addressed by the company is an improper authorization org.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.