I would like to know if the PHP2Shell vulnerability is also in any of the Atlassian products and if so if the fix has been implemented. I cant find any info on this.
Hi @Jolanda Tjabringa
Currently, there are no reports from Atlassian regarding this critical vulnerability. If you are on cloud, you are safe, because backend stack doesn't use PHP. Jira data center is mostly based on Java, so that is safe as well.
Hello @Jolanda Tjabringa ,
Good day! Welcome to Atlassian Community 😊
We’ve completed our investigation into the PHP vulnerability and found no evidence of impact to customer data or our Atlassian products.
Protecting our customers' data is our top priority. After learning of the reports, we immediately launched an investigation, and we are taking steps to secure our environment in line with published guidance.
Our security team will continue to monitor for any new developments out of an abundance of caution.
Are Atlassian Marketplace apps/plugins impacted?
Atlassian’s Marketplace apps and plugins are managed directly by their developers. We recommend contacting them directly for further information. You can read more about our Marketplace App security here: Marketplace App Trust | Atlassian.
Thank you!
Thank you, that does help a lot!
We also don't have any interfaces. So thanks for the help!
If you have found the answer helpful, please mark it as accepted.
It looks like you're new here. Sign in or register to get started.
