Create
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Sign up Log in
Products
See all
Community resources
Top groups
Explore all groups
Community resources
Learn
Community resources
Celebration

Earn badges and make progress

You're on your way to the next level! Join the Kudos program to earn points and save your progress.

Deleted user Avatar
Deleted user

Level 1: Seed

25 / 150 points

Next: Root

Avatar

1 badge earned

Collect

Participate in fun challenges

Challenges come and go, but your rewards stay with you. Do more to earn more!

Challenges
Coins

Gift kudos to your peers

What goes around comes around! Share the love by gifting kudos to your peers.

Recognition
Ribbon

Rise up in the ranks

Keep earning points to reach the top of the leaderboard. It resets every quarter so you always have a chance!

Leaderboard

Join now to unlock these features and more

CVE-2023-24998 :: Apache Commons FileUpload Vulnerability

Edited
Monty
Monty Mar 14, 2023

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24998

https://nvd.nist.gov/vuln/detail/CVE-2023-24998

 

Still waiting for an "Official" response from Atlassian.
We've found the library present in Jira DC and Bamboo installs. In searching Atlassian.com it seems like the BitBucket team are the only ones to address this CVE to date.

Comment
Watch
Like # people like this
869 views

4 comments

WorkWork
WorkWork Mar 14, 2023

Atlassian please!

Like
Reply
Andy B
Andy B Mar 15, 2023

We need the workaround ASAP. This is stalling our work activities.

Like
Reply
Chantal.Myre
Chantal.Myre Mar 15, 2023

Looking for response to this too please!

Like
Reply
Monty
Monty Mar 15, 2023

Unofficial response since it's coming from me...

I opened a support ticket and was informed that Jira 9.6.1, 9.7 and LTS 9.4.4 should include a fix (upgraded Tomcat).

Just in case other folks are looking for more information. :)

Like
Reply

Comment

Log in or Sign up to comment
Jira
Jira
TAGS
AUG Leaders

Atlassian Community Events

See all events