Loading...

XML

Word

Printable

Details

Type: Suggestion
Resolution: Fixed
Fix Version/s: 8.0.0, 7.18.5, 7.19.5, 7.20.2, 7.17.7, 7.21.1
Component/s: Environment - Other
Labels:
None

UIS:
4
Feedback Policy:

We collect Bitbucket feedback from various sources, and we evaluate what we've collected when planning our product roadmap. To understand how this piece of feedback will be reviewed, see our Implementation of New Features Policy.

Description

CVE-2022-22965

For information about CVE-2022-22965 as it applies to Atlassian's products see https://confluence.atlassian.com/kb/faq-for-cve-2022-22965-1115149136.html

The Spring Spring Framework version used in Bitbucket Server/Data Center should be updated to 5.3.19.

Note that while CVE-2022-22965 is addressed in 5.3.18, some of the restrictions break non-bundled plugins. This is fixed in Spring 5.3.19 as described here: https://github.com/spring-projects/spring-framework/issues/28269

Attachments

Issue Links

was cloned as

BSERV-13371 Update Spring Framework dependency to 5.3.20

Closed

mentioned in: Page Loading...; Page Loading...; Page Loading...; Page Loading...; Page Loading...

relates to: BBSDEV-26264 Loading...

(1 mentioned in, 1 relates to)

Activity

People

Assignee:: Unassigned

Reporter:: Ben Humphreys

Votes:: 0 Vote for this issue

Watchers:: 6 Start watching this issue

Dates

Created:: 28/Apr/2022 11:26 PM

Updated:: 30/Jan/2023 9:21 PM

Resolved:: 04/May/2022 11:22 PM