Atlassian Bamboo und Confluence (Data Center und Server): Mehrere Schwachstellen

Summary

Product

Vulnerabilities 7

• High 8.7
  CVE-2025-59343

  tar-fs has a symlink validation bypass if destination directory is predictable with a specific tarball

  tar-fs provides filesystem bindings for tar-stream. Versions prior to 3.1.1, 2.1.3, and 1.16.5 are vulnerable to symlink validation bypass if the destination directory is predictable with a specific tarball. This issue has been patched in version 3.1.1, 2.1.4…

  Mafintosh tar-fs sqlpad code-server Debian Ubuntu Wolfi npm
  Sep 24, 2025
• High 8.6
  CVE-2025-66021

  OWASP Java HTML Sanitizer is vulnerable to XSS via noscript tag and improper style tag sanitization

  OWASP Java HTML Sanitizer is a configureable HTML Sanitizer written in Java, allowing inclusion of HTML authored by third-parties in web applications while protecting against XSS. In version 20240325.1, OWASP java html sanitizer is vulnerable to XSS if HtmlPo…

  OWASP java-html-sanitizer com.googlecode.owasp-java-html-sanitizer:owasp-java-html-sanitizer Maven
  Nov 26, 2025
• High 7.5
  CVE-2025-41249 Public exploit

  CVE-2025-41249: Spring Framework Annotation Detection Vulnerability

  The Spring Framework annotation detection mechanism may not correctly resolve annotations on methods within type hierarchies with a parameterized super type with unbounded generics. This can be an issue if such annotations are used for authorization decisions…

  VMware Spring Framework thingsboard-tb-node thingsboard-tb-mqtt-transport Debian Ubuntu Wolfi Maven
  Sep 16, 2025
• High 7.5
  CVE-2025-48976 Public exploit EPSS 34%

  Apache Commons FileUpload, Apache Commons FileUpload: FileUpload DoS via part headers

  Allocation of resources for multipart headers with insufficient limits enabled a DoS vulnerability in Apache Commons FileUpload. This issue affects Apache Commons FileUpload: from 1.0 before 1.6; from 2.0.0-M1 before 2.0.0-M4. Users are recommended to upgrade…

  Apache Software Foundation Apache Commons FileUpload tomcat9 tomcat9 Debian Ubuntu Wolfi Maven
  Jun 16, 2025
• Medium 5.3
  CVE-2020-28469

  Regular Expression Denial of Service (ReDoS)

  This affects the package glob-parent before 5.1.2. The enclosure regex used to check for strings ending in enclosure containing path separator.

  js-jquery nodejs-nodemon glob-parent node-glob-parent Debian Azure Linux npm
  Jun 3, 2021
• Medium 5.3
  CVE-2022-25883

  semver vulnerable to Regular Expression Denial of Service

  Versions of the package semver before 7.5.2 are vulnerable to Regular Expression Denial of Service (ReDoS) via the function new Range, when untrusted user data is provided as a range.

  nodejs js-jquery nodejs18 nodejs-nodemon Debian Ubuntu Azure Linux npm
  Jun 21, 2023
• Medium 5.3
  CVE-2022-25927 Public exploit

  ReDoS Vulnerability in ua-parser-js version

  Versions of the package ua-parser-js from 0.7.30 and before 0.7.33, from 0.8.1 and before 1.0.33 are vulnerable to Regular Expression Denial of Service (ReDoS) via the trim() function.

  ua-parser-js node-ua-parser-js node-ua-parser-js Debian Ubuntu npm
  Jan 25, 2023

Revision history

1. 2026-03-17 #2

   Neue Updates aufgenommen

2. 2026-02-17 #1

   Initiale Fassung

References

• Atlassian Security Bulletin vom 2026-02-17
  https://confluence.atlassian.com/security/security-bulletin-february-17-2026-1722256046.html
• PoC CVE-2020-28469 vom 2026-02-17
  https://security.snyk.io/vuln/SNYK-JS-GLOBPARENT-1016905
• PoC CVE-2022-25883 vom 2026-02-17
  https://security.snyk.io/vuln/SNYK-JS-SEMVER-3247795
• PoC CVE-2022-25927 vom 2026-02-17
  https://security.snyk.io/vuln/SNYK-JS-UAPARSERJS-3244450
• PoC CVE-2025-66021 vom 2026-02-17
  https://github.com/OWASP/java-html-sanitizer/security/advisories/GHSA-g9gq-3pfx-2gw2
• Atlassian Security Bulletin - March 17 2026
  https://confluence.atlassian.com/security/security-bulletin-march-17-2026-1721271371.html