Vulnerabilities > Atlassian > Bamboo > 6.1.1

DATE CVE VULNERABILITY TITLE RISK
2017-12-13 CVE-2017-14589 Improper Input Validation vulnerability in Atlassian Bamboo
It was possible for double OGNL evaluation in FreeMarker templates through Struts FreeMarker tags to occur.
network
low complexity
atlassian CWE-20
critical
 9.6
9.6
2017-10-12 CVE-2017-9514 Incorrect Permission Assignment for Critical Resource vulnerability in Atlassian Bamboo
Bamboo before 6.0.5, 6.1.x before 6.1.4, and 6.2.x before 6.2.1 had a REST endpoint that parsed a YAML file and did not sufficiently restrict which classes could be loaded.
network
low complexity
atlassian CWE-732
8.8
8.8