Uploaded image for project: 'Bamboo Data Center'
  1. Bamboo Data Center
  2. BAM-5775

Fixed file path vulnerabilities

XMLWordPrintable

    • Icon: Suggestion Suggestion
    • Resolution: Fixed
    • 2.5.5
    • None
    • None

    • Our product teams collect and evaluate feedback from a number of different sources. To learn more about how we use customer feedback in the planning process, check out our new feature policy.

      Bamboo now requires that the system property bamboo.paths.set.allowed be set with the value of true to allow a Bamboo administrator to change the following directory paths via the Bamboo Admin user interface:

      • Import directory
      • Export directory
      • Backup directory

      If this property is not set, then the Bamboo UI will only permit the modification of file names for the above (and not their paths).

            [BAM-5775] Fixed file path vulnerabilities

            Katherine Yabut made changes -
            Workflow Original: JAC Suggestion Workflow [ 3015646 ] New: JAC Suggestion Workflow 3 [ 3601831 ]
            Status Original: RESOLVED [ 5 ] New: Closed [ 6 ]
            Owen made changes -
            Workflow Original: Confluence Workflow - Public Facing v4 [ 2698200 ] New: JAC Suggestion Workflow [ 3015646 ]
            Owen made changes -
            Backlog Order (Obsolete) Original: 12905000000
            Issue Type Original: Improvement [ 4 ] New: Suggestion [ 10000 ]
            Owen made changes -
            Workflow Original: Bamboo Workflow 2016 v1 [ 1407371 ] New: Confluence Workflow - Public Facing v4 [ 2698200 ]
            Marek Went (Inactive) made changes -
            Workflow Original: Bamboo Workflow 2014 v2 [ 607913 ] New: Bamboo Workflow 2016 v1 [ 1407371 ]
            James Dumay made changes -
            Workflow Original: Bamboo Workflow 2014 [ 596303 ] New: Bamboo Workflow 2014 v2 [ 607913 ]
            James Dumay made changes -
            Workflow Original: Bamboo Workflow 2010 [ 210336 ] New: Bamboo Workflow 2014 [ 596303 ]
            Giles Gaskell [Atlassian] made changes -
            Security Original: Reporters and Developers [ 10070 ]
            Giles Gaskell [Atlassian] made changes -
            Fix Version/s Original: Next bug fix release [ 13890 ]
            Fix Version/s Original: 2.6 M6 [ 15160 ]
            Resolution New: Fixed [ 1 ]
            Status Original: Open [ 1 ] New: Resolved [ 5 ]

            Giles Gaskell [Atlassian] added a comment -

            This issue was cloned from BAM-5652 for the Bamboo 2.5.5 Release Notes and Security Advisory.

            Giles Gaskell [Atlassian] added a comment - This issue was cloned from BAM-5652 for the Bamboo 2.5.5 Release Notes and Security Advisory.

              mwent Marek Went (Inactive)
              mark@atlassian.com MarkC
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved:

                  Estimated:
                  Original Estimate - 6h
                  6h
                  Remaining:
                  Remaining Estimate - 6h
                  6h
                  Logged:
                  Time Spent - Not Specified
                  Not Specified