Upgrade Commons FileUpload Library for CVE-2023-24998

XMLWordPrintable

    • 4
    • Severity 2 - Major

      Problem

      The Commons FileUpload library is affected by vulnerability CVE-2023-24998. This library is used by Tomcat and exported directly by Bamboo.

      Environment

      Bamboo 8+, 9+

      Steps to Reproduce

      Expected Results

      Use commons-fileupload version >=1.5

      Actual Results

      Current Bamboo Releases use commons-fileupload version < 1.5

      Workaround

      Currently, there is no known workaround for this behaviour. A workaround will be added here when available.

      Notes

            Assignee:
            Alexey Chystoprudov
            Reporter:
            Vani
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: