Upgrade Commons FileUpload Library for CVE-2023-24998

XMLWordPrintable

    • 4
    • Severity 2 - Major

      Problem

      The Commons FileUpload library is affected by vulnerability CVE-2023-24998. This library is used by Tomcat and exported directly by Bamboo.

      Environment

      Bamboo 8+, 9+

      Steps to Reproduce

      Expected Results

      Use commons-fileupload version >=1.5

      Actual Results

      Current Bamboo Releases use commons-fileupload version < 1.5

      Workaround

      Currently, there is no known workaround for this behaviour. A workaround will be added here when available.

      Notes

              Assignee:
              Alexey Chystoprudov
              Reporter:
              Vani
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Created:
                Updated:
                Resolved: