- 15/2024
- High
Atlassian has released security updates to address several vulnerabilities across multiple products.
The addressed vulnerabilities could allow the attacker to bypass security restrictions, perform denial of service attacks, or execute arbitrary code and gain access to the affected system.
Sample of the addressed vulnerabilities:
Confluence Data Center and Server Remote Code Execution Vulnerability (CVE-2024-21674):
- CVSS: 8.6
- Attack Vector: Network
- Attack Complexity: Low
- Privileges Required: None
- User Interaction: None
- Consequences: Gain Access
Affected Products:
- Bitbucket Data Center.
- Bitbucket Server.
- Bamboo Data Center and Server.
- Jira Data Center and Server.
- Jira Service Management Data Center and Server.
- Crowd Data Center and Server.
Vulnerabilities
Mitigations
The enterprise should deploy this patch as soon as the testing phase is completed.