Bitbucket Server

Organization management, configuration of member invitations with expiration and multiple additions to teams.

Migration, support for migration from Bitbucket Data Center.

4geo17.0 is a non-LTS release with support until January 28th, 2027.

For those who prefer longer support, 4geo15.0 LTS is available until July 15th, 2027.

This is a critical arbitrary file access vulnerability with a CVSS score of 9.3. And it affects a pretty big chunk of the Atlassian stack.

Bitbucket Data Center, Confluence Data Center, Jira Software, and Jira Service Management Data Center.

Bamboo, Crowd, Crucible, and FishEye.

An unauthenticated attacker can access specific files inside the web application root directory.

WordPress sites are getting backdoored with hidden admin accounts through Ninja Forms.

Atlassian has a critical unauthenticated file read flaw across Jira, Confluence, and your Bitbucket data center.

And a malicious npm package with over 37,000, 37,000 downloads is still sitting in your registry, and guess what? It's unflagged.

This is the Cyber Hub Podcast.

Through...

Though they need the exact file name and path, it doesn't allow directory listing.

So we, we haven't verified the CVSS yet for this one, but the fixed versions are Bitbucket Data Center niner point four point twenty-six and ten point two point eight, and ten point five point one.

For Confluence Data Center, it's a niner point two point twenty-six and ten point two point nineteen.