Uploaded image for project: 'Bamboo'
  1. Bamboo
  2. BAM-14571

ClassLoader Manipulation vulnerability

    XMLWordPrintable

    Details

      Description

      We have fixed a vulnerability in our version of Apache Struts. Attackers can use this vulnerability to execute Java code of their choice on systems that use these frameworks. The attacker needs to be able to access the Bamboo web interface. In cases when anonymous access is enabled, a valid user account is not required to exploit this vulnerability.

      We have discovered this vulnerability during our review of the recent Struts security advisories. This vulnerability is specific to Bamboo.
      The vulnerability affects all versions of Bamboo up to and including 5.5.

      For more information see the full advisory.

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              Unassigned Unassigned
              Reporter:
              vosipov VitalyA
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: