Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Atlassian Bamboo Data Center, Bamboo Server and 13 more products 4.13.22, 4.20.10 and 22 more versions Clear all filters
TI-2022-09599 CVE-2022-26137 · GHSA-fpj5-pcgc-34g7

Origin validation error in Atlassian Bamboo Server

Priority MEDIUM 45

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to cause additional Servlet Filters to be invoked when the application processes requests or responses.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0241 Published 2022-07-20 Fixed in 8.0.9, 8.1.8 +21 CWE-180
TI-2022-09598 CVE-2022-26136 · GHSA-f3mv-w3v5-88qp

Improper authentication in Atlassian Bamboo Server

Priority MEDIUM 57

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05662 Published 2022-07-20 Fixed in 8.0.9, 8.1.8 +21 CWE-180