nav[aria-label="Primary Navigation"] { padding: 0; & ul { list-style: none; width: 100%; display: flex; flex-direction: row; justify-content: start; align-items: start; gap: 30px; padding: 0; & li { margin: 0; } & ul li { list-style: none; } } }

Security Issue with Atlassian

Ajay Mishra_uz0ohm

Hi,

I came across one of the Scurity Issues/Vulnerability

https://cloudsek.com/security-flaw-in-atlassian-products-jira-confluencetrello-bitbucket-affecting-multiple-companies/

This has been tested.

Just wanted to highlight here.

Comments

Kalin U

Thank you, @Ajay Mishra, for the heads up!

Have you contacted Atlassian directly? Is there any other publicly available information about the vulnerability?

I didn't find anything neither under https://www.atlassian.com/trust/security/advisories, nor under https://www.cvedetails.com/vulnerability-list/vendor_id-3578/Atlassian.html, nor https://jira.atlassian.com/issues/?jql=issuetype%20%3D%20%22Public%20Security%20Vulnerability%22%20ORDER%20BY%20updated%20DESC.

Regards,
K.

Ajay Mishra_uz0ohm

@Kalin U

This vulnerability was highlighted by Cloudesk

https://cloudsek.com/security-flaw-in-atlassian-products-jira-confluencetrello-bitbucket-affecting-multiple-companies/

Dawn Carroll

Thank you for bringing this up on the Trust & Security Community. Atlassian's security team is aware of this incident and we have followed security protocol to invalidate affected session tokens. Atlassian is conducting a comprehensive investigation, though our security team has not found evidence of a compromise within our systems or products. No customer action is required at this time. We will share another update once our investigation concludes.

Andrew Gallagher

Hi Dawn,

Is this available somewhere as an official message/advice?

Thanks,

Andrew

Welcome!

It looks like you're new here. Sign in or register to get started.