Lucene search

K
atlassian73868399605eBAM-22330
HistoryJun 26, 2023 - 7:32 a.m.

Upgrade Tomcat to fix CVE-2023-34981

2023-06-2607:32:46
73868399605e
jira.atlassian.com
16

0.008 Low

EPSS

Percentile

81.4%

h3. Issue Summary

Apache Tomcat should be upgraded to 9.0.75+ or a later version to fix [CVE-2023-34981|https://nvd.nist.gov/vuln/detail/CVE-2023-34981]
{panel:bgColor=#e3fcef}
Bamboo is not vulnerable to this issue as it does not bundle Apache Tomcat 9.0.74 on any of its releases.

This is an informational ticket to inform customers about the underlying CVE.
{panel}
h3. Environment

  • Bamboo 9

h3. Steps to Reproduce

  • Check the Apache Tomcat version onΒ {{pom.xml}}Β orΒ {{<bamboo-install>/bin/version.sh/bat}}

h3. Expected Results

  • Bamboo 9.x: apache-tomcat 9.0.75 or later

h3. Actual Results

  • Bamboo 9.x: apache-tomcat 9.0.74