Atlassian修補Bamboo、Confluence、Jira高風險漏洞
支付動態 · 2024-07-22

Atlassian發布7月安全公告,修補Bamboo、Confluence和Jira產品的安全漏洞,包含11項高風險漏洞

Atlassian內容管理軟體Confluence產品線則修補Confluence Data Center及Server 7項漏洞。其中5項為影響org.apache.commons:commons-compress元件的相依性阻斷服務(DoS)漏洞,能讓未經授權的攻擊者曝險使用者環境中的資產,影響檔案的隱私及完整性,這些漏洞風險值同為7.5,編號分別為CVE-2019-12402、CVE-2021-36090、CVE-2021-35515、CVE-2021-35516、CVE-2021-35517。CVE-2023-22025則是第三方相依性漏洞,造成環境資產曝光,風險值7.4。

CVE-2024-21686是一儲存型跨站腳本攻擊(stored XSS)可將惡意程式儲存在類似留言板的網站資料庫中,以便在用戶瀏覽器中執行惡意HTML或Javascript惡意程式碼,以竊取後端資料庫資料。風險值為7.3。

專案管理工具Jira則是在Data Center與Server,以及Service Management Data Center和Server二項產品的com.thoughtworks.xstream:xstream元件出現相依性阻斷服務漏洞CVE-2022-41966,在沒有用戶互動下造成環境中檔案曝險,風險值7.5。

軟體公司已經釋出最新版本,由於這批漏洞是在每月安全布告中公布,而非重大安全公告,意謂著較低風險。但Atlassian仍呼籲企業用戶排定時間升級到最新版本以解決安全風險。

Popular articles
Are you ready to maximize your earnings? Try ProPush.me Constructor!
Marketing
UK MPs reopen 2025 gambling inquiry as reform stalls
Regulation
Super PAC Raises $48 Million: Sports Betting Forces Ramp Up Political Push
Regulation
Vietnam’s Controlled Gaming Shift Gains Ground, But Domestic Demand Still Lags
Southeast Asia
Vietnam's tightening online gaming policy creates new market opportunities
Southeast Asia
Kazakhstan plans to penalise online casino promotions
Regulation
Full House at GAT Expo Cartagena 2026 Academic Agenda
Online Game
Across 6 Cities: HUIDU Invites You to 8 World Cup Parties Redefining High-Value Social Networking
HUIDU Focus
GAT CDMX 2025 Institutional Academy: Leaders and Experts Analyze the Present and Future of the Gaming Industry in Mexico and Lat
Sports Game
SBC Summit Canada to Make Player Safety a Key Pillar of 2026 Agenda
Marketing
Brazil Proposes Raising Gambling Tax Rate to 24%, With Revenue Allocated to Social Security and Healthcare
Regulation
Online gambling, crypto pose ongoing money laundering risks in Philippines, analyst says
Southeast Asia
1spin4win releases unique slot Don Catleone Hold and Win featuring gangster cats
Online Game
Indiana online casino bill stalls in House committee
Regulation
B2B Tech Infrastructure Gains Momentum in Philippine Gaming Sector
Southeast Asia
Home
Game
Cooperation
Find
My