Uploaded image for project: 'Bamboo'
  1. Bamboo
  2. BAM-5775

Fixed file path vulnerabilities

    XMLWordPrintable

    Details

    • Type: Suggestion
    • Status: Closed (View Workflow)
    • Resolution: Fixed
    • Fix Version/s: 2.5.5
    • Component/s: None
    • Labels:
      None
    • Feedback Policy:

      Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Description

      Bamboo now requires that the system property bamboo.paths.set.allowed be set with the value of true to allow a Bamboo administrator to change the following directory paths via the Bamboo Admin user interface:

      • Import directory
      • Export directory
      • Backup directory

      If this property is not set, then the Bamboo UI will only permit the modification of file names for the above (and not their paths).

        Attachments

          Activity

            People

            Assignee:
            mwent Marek Went (Inactive)
            Reporter:
            mark@atlassian.com MarkC
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Time Tracking

                Estimated:
                Original Estimate - 6h
                6h
                Remaining:
                Remaining Estimate - 6h
                6h
                Logged:
                Time Spent - Not Specified
                Not Specified