Description
Multiple Atlassian products (Bitbucket Data Center ,Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible and Fisheye) contain a files or directories accessible to external parties vulnerability which could allow an unauthenticated attacker to access specific files within the web application root directory in affected versions.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| Bamboo Data Center | Atlassian / Bamboo Data Center | All other versions | affected |
| Bamboo Data Center | Atlassian / Bamboo Data Center | Patch version 10.2.24 and later | unaffected |
| Bamboo Data Center | Atlassian / Bamboo Data Center | Patch version 12.1.12 and later | unaffected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | All other versions | affected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | Patch version 10.2.8 and later | unaffected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | Patch version 10.5.1 and later | unaffected |
| Bitbucket Data Center | Atlassian / Bitbucket Data Center | Patch version 9.4.26 and later | unaffected |
| Confluence Data Center | Atlassian / Confluence Data Center | All other versions | affected |
| Confluence Data Center | Atlassian / Confluence Data Center | Patch version 10.2.19 and later | unaffected |
| Confluence Data Center | Atlassian / Confluence Data Center | Patch version 9.2.26 and later | unaffected |
| Crowd Data Center | Atlassian / Crowd Data Center | All other versions | affected |
| Crowd Data Center | Atlassian / Crowd Data Center | Patch version 6.3.7 and later | unaffected |
| Crowd Data Center | Atlassian / Crowd Data Center | Patch version 7.0.3 and later | unaffected |
| Crowd Data Center | Atlassian / Crowd Data Center | Patch version 7.1.7 and later | unaffected |
| Crowd Data Center | Atlassian / Crowd Data Center | Patch version 7.2.4 and later | unaffected |
| Crucible Data Center | Atlassian / Crucible Data Center | All other versions | affected |
| Crucible Data Center | Atlassian / Crucible Data Center | Patch version 4.9.15 and later | unaffected |
| Fisheye Data Center | Atlassian / Fisheye Data Center | All other versions | affected |
| Fisheye Data Center | Atlassian / Fisheye Data Center | Patch version 4.9.15 and later | unaffected |
| Jira Service Management Data Center | Atlassian / Jira Service Management Data Center | All other versions | affected |
| Jira Service Management Data Center | Atlassian / Jira Service Management Data Center | Patch version 10.3.26 and later | unaffected |
| Jira Service Management Data Center | Atlassian / Jira Service Management Data Center | Patch version 11.3.12 and later | unaffected |
| Jira Service Management Data Center | Atlassian / Jira Service Management Data Center | Patch version 5.12.40 and later | unaffected |
| Jira Software Data Center | Atlassian / Jira Software Data Center | All other versions | affected |
| Jira Software Data Center | Atlassian / Jira Software Data Center | Patch version 10.3.26 and later | unaffected |
| Jira Software Data Center | Atlassian / Jira Software Data Center | Patch version 11.3.12 and later | unaffected |
| Jira Software Data Center | Atlassian / Jira Software Data Center | Patch version 9.12.40 and later | unaffected |