16 kwietnia 2024 r. firma Atlassian opublikowała porady dotyczące bezpieczeństwa dotyczące luk w zabezpieczeniach następujących produktów:
• Bamboo Data Center – wiele wersji
• Bamboo Server – wiele wersji
• Bitbucket Data Center – wiele wersji
• Serwer Bitbucket – wiele wersji
• Confluence Data Center – wiele wersji
• Serwer Confluence – wiele wersji
• Jira Service Management Data Center – wiele wersji
• Jira Service Management Server – wiele wersji
• Jira Software Data Center – wiele wersji
• Jira Software Server – wiele wersji
| Produkt | Wersja podatna | Patch | Opis | CVE ID | CVSS |
| Bamboo Data Center and Server | 9.6.0 9.5.0 do 9.5.2 9.4.0 do 9.4.3 9.3.0 do 9.3.6 9.2.0 do 9.2.12 (LTS) 9.1.0 do 9.1.3 9.0.0 do 9.0.4 8.2.0 do 8.2.9 Wszelkie wcześniejsze wersje | 9.6.1 (LTS) Data Center Only 9.5.3 Data Center Only 9.2.13 (LTS) | org.springframework.security:spring-security-core Dependency in Bamboo Data Center and Server | CVE-2024-22257 | 8.2 |
| SSRF (Server-Side Request Forgery) org.springframework:spring-web Dependency in Bamboo Data Center and Server | CVE-2024-22259 | 8.1 | |||
| SSRF (Server-Side Request Forgery) org.springframework:spring-web Dependency in Bamboo Data Center and Server | CVE-2024-22243 | 8.1 | |||
| Confluence Data Center and Server | 8.7.0 8.6.0 do 8.6.2 8.5.0 do 8.5.6 (LTS) 8.4.0 do 8.4.5 8.3.0 do 8.3.4 8.2.0 do 8.2.3 8.1.0 do 8.1.4 8.0.0 do 8.0.4 7.20.0 do 7.20.3 7.19.0 do 7.19.19 (LTS) 7.18.0 do 7.18.3 7.17.0 do 7.17.5 Wszelkie wcześniejsze wersje | 8.9.0 Data Center Only 8.8.0 Data Center Only 8.7.1 do 8.7.2 Data Center Only 8.5.7 do 8.5.8 (LTS) 7.19.20 do 7.19.21 (LTS) | DoS (Denial of Service) software.amazon.ion:ion-java Dependency in Confluence Data Center and Server | CVE-2024-21634 | 7.5 |
| Jira Software Data Center and Server | 9.14.0 do 9.14.1 9.13.0 do 9.13.1 9.12.0 do 9.12.5 LTS 9.11.0 do 9.11.3 9.10.0 do 9.10.2 9.9.0 do 9.9.2 9.8.0 do 9.8.2 9.7.0 do 9.7.2 9.6.0 9.5.0 do 9.5.1 9.4.0 do 9.4.17 LTS 9.3.0 do 9.3.3 9.2.0 do 9.2.1 9.1.0 do 9.1.1 9.0.0 Wszelkie wcześniejsze wersje | 9.15.0 Data Center Only 9.12.6 do 9.12.7 (LTS) 9.4.18 do 9.4.20 (LTS) | DoS (Denial of Service) software.amazon.ion:ion-java Dependency in Jira Software Data Center and Server | CVE-2024-21634 | 7.5 |
| DoS (Denial of Service) net.minidev:json-smart Dependency in Jira Software Data Center and Server | CVE-2023-1370 | 7.5 | |||
| Jira Service Management Data Center and Server | od 5.12.0 do 5.12.5 (LTS) od 5.11.0 do 5.11.3 od 5.10.0 do 5.10.2 od 5.9.0 do 5.9.2 od 5.8.0 do 5.8.2 od 5.7.0 do 5.7.2 od 5.6.0 do 5.6.2 od 5.5.0 do 5.5.1 od 5.4.0 do 5.4.18 (LTS) Wszelkie wcześniejsze wersje | 5.15.0, 5.14.0, 5.14.1 Data Center Only 5.12.6 (LTS) 5.4.19 (LTS) | Denial of Service (DoS) com.nimbusds:nimbus-jose-jwt dependency in Jira Service Management Data Center and Server | CVE-2023-52428 | 7.5 |
