Release Security Vulnerabilities
|
| Product & Release Notes |
Affected Versions |
Fixed Version |
Vulnerability Summary |
CVE ID |
CVSS Severity |
| Bamboo Data Center and Server |
- 10.0.0 to 10.0.2
- 9.6.0 to 9.6.7 (LTS)
- 9.2.1 to 9.2.19 (LTS)
|
- 10.0.3 Data Center Only
- 9.6.8 (LTS) recommended Data Center Only
- 9.2.20 (LTS)
|
RCE (Remote Code Execution) org.apache.avro:avro Dependency in Bamboo Data Center and Server |
CVE-2024-47561 |
7.3 High
|
| Bitbucket Data Center and Server |
- 8.19.0 to 8.19.2 (LTS)
- 8.18.0 to 8.18.1
- 8.17.0 to 8.17.2
- 8.16.0 to 8.16.4
- 8.15.0 to 8.15.5
- 8.14.0 to 8.14.6
- 8.13.0 to 8.13.6
- 8.12.0 to 8.12.6
- 8.11.0 to 8.11.6
- 8.10.0 to 8.10.6
- 8.9.0 to 8.9.13 (LTS)
- 8.8.0 to 8.8.7
- 8.7.0 to 8.7.5
- 8.6.2 to 8.6.4
- 8.5.2 to 8.5.4
- 8.4.3 to 8.4.4
- 8.3.4
|
- 9.0.0 to 9.0.1 Data Center Only
- 8.19.3 to 8.19.11 (LTS) recommended Data Center Only
- 8.9.14 to 8.9.21 (LTS)
|
DoS (Denial of Service) org.bouncycastle:bcprov-jdk18on Dependency in Bitbucket Data Center and Server |
CVE-2024-30172 |
7.5 High
|
| DoS (Denial of Service) org.apache.tomcat.embed:tomcat-embed-core Dependency in Bitbucket Data Center and Server |
CVE-2024-24549 |
7.5 High
|
| Confluence Data Center and Server |
- 9.1.0
- 9.0.1 to 9.0.3
- 8.9.0 to 8.9.7
- 8.8.0 to 8.8.1
- 8.7.1 to 8.7.2
- 8.6.0 to 8.6.2
- 8.5.0 to 8.5.16 (LTS)
- 8.4.0 to 8.4.5
- 8.3.0 to 8.3.4
- 8.2.0 to 8.2.3
- 8.1.0 to 8.1.4
- 8.0.0 to 8.0.4
- 7.20.3
- 7.19.4 to 7.19.28 (LTS)
|
- 9.1.1 Data Center Only
- 8.9.8 Data Center Only
- 8.5.17 (LTS) recommended
- 7.19.29 (LTS)
|
DoS (Denial of Service) braces Dependency in Confluence Data Center |
CVE-2024-4068 |
7.5 High
|
| DoS (Denial of Service) com.nimbusds:nimbus-jose-jwt Dependency in Confluence Data Center and Server |
CVE-2023-52428 |
7.5 High
|
| DoS (Denial of Service) decode-uri-component Dependency in Confluence Data Center |
CVE-2022-38900 |
7.5 High
|
| BASM (Broken Authentication & Session Management) browserify-sign Dependency in Confluence Data Center |
CVE-2023-46234 |
7.5 High
|
| Path Traversal org.springframework:spring-webmvc Dependency in Confluence Data Center and Server |
CVE-2024-38816 |
7.5 High
|
| DoS (Denial of Service) org.bouncycastle:bcprov-jdk18on Dependency in Confluence Data Center and Server |
CVE-2024-30172 |
7.5 High
|
| DoS (Denial of Service) org.apache.tomcat:tomcat-coyote Dependency in Confluence Data Center and Server |
CVE-2024-24549 |
7.5 High
|
| Crowd Data Center and Server |
- 6.0.0 to 6.0.2
- 5.3.0 to 5.3.5
- 5.2.0 to 5.2.10
- 5.1.1 to 5.1.13
|
- 6.1.1 to 6.1.2 recommended Data Center Only
- 6.0.3 to 6.0.4 Data Center Only
- 5.3.6 Data Center Only
|
DoS (Denial of Service) org.apache.tomcat:tomcat-coyote Dependency in Crowd Data Center and Server |
CVE-2024-38286 |
8.6 High
|
| DoS (Denial of Service) tomcat Dependency in Crowd Data Center |
CVE-2024-34750 |
7.5 High
|
| DoS (Denial of Service) org.apache.tomcat:tomcat-coyote Dependency in Crowd Data Center and Server |
CVE-2024-34750 |
7.5 High
|
| DoS (Denial of Service) org.bouncycastle:bcprov-jdk18on Dependency in Crowd Data Center and Server |
CVE-2024-30172 |
7.5 High
|
| DoS (Denial of Service) org.apache.tomcat:tomcat-coyote Dependency in Crowd Data Center and Server |
CVE-2024-24549 |
7.5 High
|
| Jira Data Center and Server |
- 10.0.0 to 10.0.1
- 9.17.0 to 9.17.3
- 9.12.0 to 9.12.14 (LTS)
- 9.4.1 to 9.4.27 (LTS)
|
- 10.1.1 to 10.1.2 Data Center Only
- 9.17.4 to 9.17.5 Data Center Only
- 9.12.15 (LTS) recommended
- 9.4.28 (LTS)
|
XSS (Cross Site Scripting) DOMPurify Dependency in Jira Core Data Center and Server |
CVE-2024-45801 |
8.3 High
|
| Jira Service Management Data Center and Server |
- 10.0.0 to 10.0.1
- 5.17.0 to 5.17.3
- 5.16.0 to 5.16.1
- 5.15.2
- 5.14.0 to 5.14.1
- 5.13.0 to 5.13.1
- 5.12.0 to 5.12.14 (LTS)
- 5.11.0 to 5.11.3
- 5.10.0 to 5.10.2
- 5.9.0 to 5.9.2
- 5.8.0 to 5.8.2
- 5.7.0 to 5.7.2
- 5.6.0
- 5.5.0 to 5.5.1
- 5.4.1 to 5.4.27 (LTS)
- 5.3.2 to 5.3.3
- 5.2.1
|
- 10.1.1 to 10.1.2 Data Center Only
- 5.17.4 to 5.17.5 Data Center Only
- 5.12.15 (LTS) recommended
- 5.4.28 (LTS)
|
XSS (Cross Site Scripting) DOMPurify Dependency in Jira Service Management Data Center and Server |
CVE-2024-45801 |
8.3 High
|
| DoS (Denial of Service) com.nimbusds:nimbus-jose-jwt Dependency in Jira Service Management Data Center and Server |
CVE-2023-52428 |
7.5 High
|
| Sourcetree for Mac |
|
|
RCE (Remote Code Execution) in Sourcetree for Mac and Sourcetree for Windows |
CVE-2024-21697 |
8.8 High
|
| Sourcetree for Windows |
|
|
RCE (Remote Code Execution) in Sourcetree for Mac and Sourcetree for Windows |
CVE-2024-21697 |
8.8 High
|
