Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
It's not the same without you

Join the community to find out what other Atlassian users are discussing, debating and creating.

Atlassian Community Hero Image Collage

Is Bamboo vulnerable to CVE-2018-11776 (Apache Struts)

Bamboo appears to use a custom version of the struts2-core-2.5.13 jar.  Is Bamboo therefore vulnerable to the above CVE?

Additionally, on what timescale can we expect a new release of Bamboo that uses the latest fixed version of Struts (2.5.17)? 

2 answers

0 votes

Bamboo is not vulnerable.

Struts 2.5.17 will be part of Bamboo 6.7 release planned for second half of September 2018

0 votes
Alexis Robert Community Leader Aug 29, 2018

Hi @Richard Cross


in another post, Atlassian replied the following:



Thank you for reaching out to Atlassian Community!

We understand your concern regarding the new CVE-2018-11776 vulnerability announced On August 22, by the Apache Software Foundation

Our security team has investigated the case and we confirm that no Atlassian products are affected by this vulnerability, including Crowd 3.2 and all other Crowd versions that did not reach EOL.

However, as an extra precaution that is in-line with industry best practices we will be releasing new versions of Crowd 3.2.x and 3.1.x with updated version of Struts.


Let me know if this helps, 



Suggest an answer

Log in or Sign up to answer
Community showcase
Published in Bamboo

Bamboo Data Center on Kubernetes

Hi, If you are running self-managed environments and looking to adopt modern infrastructure, Bamboo Data Center can now be deployed in a Kubernetes cluster. By leveraging Kubernetes, you can easily...

58 views 0 4
Read article

Community Events

Connect with like-minded Atlassian users at free events near you!

Find an event

Connect with like-minded Atlassian users at free events near you!

Unfortunately there are no Community Events near you at the moment.

Host an event

You're one step closer to meeting fellow Atlassian users at your local event. Learn more about Community Events

Events near you