Jira Server - Template injection in various resources - CVE-2019-11581

2019-07-22 Thread Anton Black
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 This email refers to the advisory found at https://confluence.atlassian.com/x/AzoGOg . CVE ID: * CVE-2019-11581. Product: Jira Server and Data Center. Affected Jira Server and Data Center product versions: 4.0.0 <= version < 7.6.14 7.13.0 <=

Bitbucket Server security advisory 2019-05-22

2019-05-23 Thread Anton Black
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 This email refers to the advisory found at https://confluence.atlassian.com/x/V87JOQ . CVE ID: * CVE-2019-3397. Product: Bitbucket Server. Affected Bitbucket Server product versions: 5.13.0 <= version < 5.13.5 5.14.0 <= version < 5.14.3

October 2018 Sourcetree Advisory

2018-10-31 Thread Anton Black
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 This email refers to the advisory found at https://confluence.atlassian.com/display/SOURCETREEKB/Sourcetree+Security+Advisory+2018-10-31 . CVE ID: * CVE-2018-13396. * CVE-2018-13397. Product: Sourcetree. Affected Sourcetree product versions:

Sourcetree - Remote Code Execution vulnerabilities - CVE-2018-11235

2018-07-23 Thread Anton Black
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 This email refers to the advisory found at https://confluence.atlassian.com/sourcetreekb/sourcetree-security-advisory-2018-07-18-953674465.html . CVE ID: * CVE-2018-11235. * CVE-2018-13385. * CVE-2018-13386. Product: Sourcetree. Affected