Forums
Home Product Q&A Discussion groups Articles Ask a question Search
Learning
Events
Champions

Forums

Articles
Create
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Product Q&A
See all
Community resources
Top groups
Explore all groups
Community resources
Learn
Community resources
Events
Community resources

CVE-2023-24998 :: Apache Commons FileUpload Vulnerability

Monty
Monty
Contributor
March 14, 2023

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-24998

https://nvd.nist.gov/vuln/detail/CVE-2023-24998

 

Still waiting for an "Official" response from Atlassian.
We've found the library present in Jira DC and Bamboo installs. In searching Atlassian.com it seems like the BitBucket team are the only ones to address this CVE to date.

Comment
Watch
Like # people like this
1600 views

4 comments

Comment

Log in or Sign up to comment
WorkWork
WorkWork
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
Get involved
March 14, 2023

Atlassian please!

Like
Reply
Andy B
Andy B
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
Get involved
March 15, 2023

We need the workaround ASAP. This is stalling our work activities.

Like
Reply
Chantal.Myre
Chantal.Myre
I'm New Here
I'm New Here
Those new to the Atlassian Community have posted less than three times. Give them a warm welcome!
Get involved
March 15, 2023

Looking for response to this too please!

Like
Reply
Monty
Monty
Contributor
March 15, 2023

Unofficial response since it's coming from me...

I opened a support ticket and was informed that Jira 9.6.1, 9.7 and LTS 9.4.4 should include a fix (upgraded Tomcat).

Just in case other folks are looking for more information. :)

Like
Reply
groups-icon
Data Center
TAGS
AUG Leaders

Atlassian Community Events

    See all events
    Community
    Forums
    FAQs Forums guidelines
    Learning
    About learning Resources
    Events
    Champions
    Copyright © 2025 Atlassian
    Privacy Policy Terms Security
    Welcome illustration

    Welcome to the new Atlassian Community

    Online forums and learning are now in one easy-to-use experience.

    By continuing, you accept the updated Community Terms of Use and acknowledge the Privacy Policy. Your public name, photo, and achievements may be publicly visible and available in search engines.