Discussions
-
Action Required: RCE Vulnerabilities Identified in Multiple Products
We have discovered four critical vulnerabilities impacting customers of the products listed below. All four vulnerabilities carry a critical CVSS score of 9.0 or higher, and customers must take immediate action to protect their instances. Please carefully review all of the Critical Security Advisories impacting your…
-
CVE-2023-46604 - Apache ActiveMQ RCE Vulnerability impacts Bamboo Data Center and Server
Atlassian has disclosed a CVE that impacts Bamboo Data Center and Bamboo Server today. This particular CVE affects all previous versions of Bamboo. Please see the full advisory in https://confluence.atlassian.com/security/cve-2023-46604-apache-activemq-rce-vulnerability-impacts-bamboo-data-center-and-server-1319242919.html…
-
Confluence Data Center and Server security advisory CVE-2023-22515
Hello, Atlassian has been made aware of an issue reported by a handful of customers where external attackers may have exploited a previously unknown vulnerability in publicly accessible Confluence Data Center and Server instances to create unauthorized Confluence administrator accounts and access Confluence instances.…
-
Critical Security Advisory for Confluence Server and Data Center CVE-2022-26134 - Fix available
The security advisory has been updated with new information regarding a fix for Confluence Data Center and Server products. Please see the advisory for more information and updated instructions. Note that Atlassian Cloud sites are protected. If your Confluence site is accessed via an atlassian.net domain, it is hosted by…
-
Jira Server and Jira Data Center CVE-2022-0540 - Authentication bypass in Seraph
Atlassian has published security advisory CVE-2022-0540 today, 20 April 2022. This advisory is in regards to Jira Server and Jira Data Center. Jira Cloud is not affected. The goal of this article is to help raise awareness for this critical vulnerability and to provide you a means to ask further questions about this in…
-
Customizing Firefox Quantum to replace the loss of Tab Mix Plus
Ok. I have a confession to make: Up until last week, I had been running Firefox 56 (a 2 year old browser version) because of a browser extension I couldn’t live without: Tab Mix Plus A number of extensions in Firefox stopped working and at that time there was no clear way to make them start up again. I knew I was running…
-
What is your Breakfast of Champions?
We have so many awesome people that contribute to our Community. Thank you, you're all champions to me. But even champions need fuel to start their day. What is your breakfast of Champions? What food and drink get you going in the morning? * Bagels? * Eggs and Avocado Toast? * Pancakes and syrup? * Cereal? * BACON? * Large…
-
Security Advisories for Jira Service Desk Server, November 2019
Atlassian has disclosed two critical severity security vulnerabilities (CVE-2019-15003 and CVE-2019-15004) in Jira Service Desk Server and Jira Service Desk Data Center on November 6, 2019. This article is designed to help you determine if you are affected and how to ask for help here on Community. The TLDR (too long,…
-
CVE-2019-11581 Critical Security Advisory for Jira Server and Data Center - Template injection
Atlassian has published security advisory CVE-2019-11581 today, 10 July 2019. This advisory is in regards to multiple versions of Jira Server and Data Center. Jira Cloud is not affected. The goal of this article is to help raise awareness for this critical vulnerability and to provide you a means to ask further questions…