Atlassian Bamboo Remote Code Execution Vulnerability (CNVD-2017-16340)

Atlassian Bamboo is a suite of continuous integration build tools from Atlassian Australia. The tools help development teams build, test, release and deploy projects using continuous delivery capabilities. A security vulnerability exists in Atlassian Bamboo versions 5.x prior to 5.15.7 and 6.x...

CVE-2017-8907: Incorrect Authorization

Atlassian Bamboo 5.x before 5.15.7 and 6.x before 6.0.1 did not correctly check if a user creating a deployment project had the edit permission and therefore the rights to do so. An attacker who can login to Bamboo as a user without the edit permission for deployment projects is able to use this...