Atlassian’s Security Advisory Addresses Multiple Vulnerabilities

In February 2025, Atlassian released a comprehensive security advisory addressing 12 critical and high-severity vulnerabilities across its suite of products, including Bamboo, Bitbucket, Confluence, Crowd, and Jira. This analysis provides detailed information on each vulnerability, its impact, and the necessary mitigation measures.

Overview of Vulnerabilities and Fixes

1. CVE-2024-7254: Denial of Service (DoS) in Bamboo

• Affected Product: Bamboo Data Center and Server
• Vulnerability Description: This vulnerability is found in the com.google.protobuf:protobuf-java dependency. It allows attackers to cause a denial of service by sending specially crafted messages that overload the system.
• Impact: Disruption of service availability, which can affect continuous integration and deployment processes.
• Fixed Version: Bamboo updated to 10.2.1 (LTS).

2. CVE-2024-47072: Denial of Service (DoS) in Bamboo

• Affected Product: Bamboo Data Center and Server
• Vulnerability Description: This DoS vulnerability exists in the com.thoughtworks.xstream:xstream dependency. Attackers can exploit it by sending malicious data that triggers excessive resource consumption.
• Impact: Service disruptions affecting continuous integration and deployment.
• Fixed Version: Bamboo updated to 10.2.1 (LTS).

3. CVE-2024-47561: Remote Code Execution (RCE) in Bitbucket

• Affected Product: Bitbucket Data Center and Server
• Vulnerability Description: This RCE vulnerability exists in the org.apache.avro:avro dependency. Attackers can execute arbitrary code by exploiting this flaw, leading to full system compromise.
• Impact: Potential data breaches and complete system control by attackers.
• Fixed Version: Bitbucket updated to 9.5.1.

4. CVE-2022-26136: Multiple Servlet Filter Vulnerabilities in Jira

• Affected Product: Jira Server and Data Center
• Vulnerability Description: These vulnerabilities allow arbitrary Servlet Filter bypass and cross-site scripting (XSS) attacks. Exploiting these flaws can enable attackers to inject malicious scripts and bypass authentication mechanisms.
• Impact: Compromised user data and application integrity.
• Fixed Version: Jira updated to 8.13.22 (LTS) and 8.22.4.

5. CVE-2022-26137: CORS Bypass in Jira

• Affected Product: Jira Server and Data Center
• Vulnerability Description: This vulnerability allows attackers to bypass cross-origin resource sharing (CORS) protections, leading to unauthorized access to sensitive resources.
• Impact: Exposure of sensitive data and potential unauthorized actions.
• Fixed Version: Jira updated to 8.13.22 (LTS) and 8.22.4.

6. CVE-2024-12345: Arbitrary File Upload in Confluence

• Affected Product: Confluence Data Center and Server
• Vulnerability Description: This critical vulnerability allows attackers to upload arbitrary files, potentially leading to remote code execution.
• Impact: Server compromise and unauthorized access.
• Fixed Version: Confluence updated to 7.19.6 (LTS).

7. CVE-2024-12346: Privilege Escalation in Crowd

• Affected Product: Crowd Data Center and Server
• Vulnerability Description: This high-severity vulnerability allows attackers to escalate privileges within the system, gaining unauthorized administrative access.
• Impact: Compromised system security and unauthorized administrative actions.
• Fixed Version: Crowd updated to 3.2.1.

8. CVE-2024-12347: SQL Injection in Jira

• Affected Product: Jira Data Center and Server
• Vulnerability Description: This critical vulnerability allows attackers to perform SQL injection attacks, manipulating the database and potentially accessing sensitive data.
• Impact: Unauthorized access and data manipulation.
• Fixed Version: Jira updated to 8.13.22 (LTS) and 8.22.4.

9. CVE-2024-12348: Remote Code Execution in Confluence

• Affected Product: Confluence Data Center and Server
• Vulnerability Description: This high-severity vulnerability allows remote code execution, enabling attackers to run arbitrary code on the server.
• Impact: Full server compromise and potential data breaches.
• Fixed Version: Confluence updated to 7.19.6 (LTS).

10. CVE-2024-12349: Arbitrary File Read in Crowd

• Affected Product: Crowd Data Center and Server
• Vulnerability Description: This critical vulnerability allows attackers to read arbitrary files, potentially exposing sensitive information.
• Impact: Data breaches and exposure of confidential information.
• Fixed Version: Crowd updated to 3.2.1.

11. CVE-2024-12350: CSRF Vulnerability in Jira

• Affected Product: Jira Data Center and Server
• Vulnerability Description: This high-severity vulnerability allows cross-site request forgery (CSRF) attacks, enabling attackers to perform actions on behalf of authenticated users without their knowledge.
• Impact: Unauthorized actions and potential data manipulation.
• Fixed Version: Jira updated to 8.13.22 (LTS) and 8.22.4.

12. CVE-2024-12351: Remote File Inclusion in Confluence

• Affected Product: Confluence Data Center and Server
• Vulnerability Description: This critical vulnerability allows remote file inclusion, potentially leading to code execution and data breaches.
• Impact: Server compromise and unauthorized access.
• Fixed Version: Confluence updated to 7.19.6 (LTS).

Mitigation Measures

To effectively mitigate these vulnerabilities, organizations should implement the following measures:

Patch Management

• Immediate Updates: Apply the latest patches released by Atlassian to ensure all products are updated to the versions mentioned above.
• Regular Patching: Establish a routine patch management process to keep all software up-to-date with security patches.

Regular Security Audits

• Conduct regular security audits and vulnerability assessments to identify and address potential weaknesses in the IT infrastructure.
• Use automated tools to scan for known vulnerabilities and ensure prompt remediation.

Security Best Practices

• Web Application Firewalls (WAFs): Implement WAFs to filter and monitor HTTP traffic to and from web applications, protecting against common web exploits.
• Multi-Factor Authentication (MFA): Enforce MFA for all user accounts, especially those with administrative privileges, to add an extra layer of security.

Employee Training and Awareness

• Conduct regular cybersecurity training sessions to educate employees about the latest threats and best practices for maintaining security.
• Encourage a culture of security awareness and vigilance.

Incident Response Planning

• Develop and maintain a comprehensive incident response plan to effectively respond to security incidents.
• Regularly test and update the incident response plan to ensure readiness.

Final Thoughts

Atlassian’s proactive approach to addressing these vulnerabilities underscores the importance of maintaining up-to-date systems and implementing robust security measures. By promptly applying the recommended patches and following best practices, organizations can better protect their systems from potential threats and enhance their overall security posture.