Sensitive Data Exposure in Atlassian Bamboo

CVE-2021-26067

What is CVE-2021-26067?

Atlassian Bamboo versions prior to 7.2.2 contain a vulnerability that allows unauthenticated remote attackers to access sensitive information. By exploiting this flaw, attackers can view a stack trace that potentially discloses the path to the home directory and checks for the existence of certain files in the temporary directory. This could result in exposure of critical system data, highlighting the importance of updating to the latest version to mitigate this risk.

References