Atlassian Bamboo before 5.11.4.1 and 5.12.x before 5.12.3.1 does not properly restrict permitted deserialized classes, which allows remote attackers to execute arbitrary code via vectors related to XStream Serialization.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2016-08-02T16:00:00
Updated: 2024-08-06T00:53:48.695Z
Reserved: 2016-06-01T00:00:00
Link: CVE-2016-5229
Vulnrichment
No data.
NVD
Status : Modified
Published: 2016-08-02T16:59:02.260
Modified: 2024-11-21T02:53:53.010
Link: CVE-2016-5229
Redhat
No data.