CVE-2018-11307 - FasterXML Jackson-databind (Bamboo)

[Richard Vacaflor]

Is this vulnerability affecting the Bamboo version 2.8.10 and 2.3.2?

If yes, is there patch/fix or when they would be ready?

Thanks

[Daniel Eads · Accepted solution]

Hey Richard,

Thanks for reaching out to check on Bamboo in addition to your question about Bitbucket for CVE-2018-11307. Bamboo does not use the iBatis library affected by the vulnerability and is unaffected by advisory.

Cheers,
Daniel | Atlassian Support

[Richard Vacaflor]

Hi Daniel, thank you very much for your prompt response, I much really appreciated.

Richard.