Update Spring Framework for CVE-2018-1270
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1270
At the time of writing, no actual vulnerability is known for Bamboo however, customers have reported their scanning tools report the pre-fixed versions of Spring Framework so at a minimum it should be updated to alleviate that concern.