Atlassian Gifts Us Another Patch Cycle

Atlassian rolled out a 9.3 flaw letting strangers read web root files on self-hosted servers. Cancel your evening plans, admins.

Source: watchTowr

The Full Story

Severity: Critical Mood: Frustrating

Same story different day, as Atlassian kindly blessed eight self-hosted Data Center and Server setups with a critical 9.3 vulnerability. Remote interlopers need no authentication whatsoever to retrieve web root files, provided paths and names are already known. Those running Jira, Confluence, Bitbucket, and Bamboo bear the brunt of the headache, with salvation arriving via the thrilling joy of deploying available fixed releases.

#patchingagain #atlassianwoes

Open article →