Atlassian fixed critical flaws in Bamboo, Bitbucket, Confluence, and Crowd Data Center/Server. Patch now if you self-host — small teams and enterprise fleets alike; Cloud customers can skip, the vendor handles it.Cyber Resilience desk
Sources (1)
- cccs · cccs
What this means for you — CISO:Inventory self-hosted Atlassian Data Center/Server instances (Bamboo, Bitbucket, Confluence, Crowd) and apply the July 21 advisory patches; prioritize any internet-facing Confluence or Bitbucket.
What this means for you — Lean IT orgs:If you run Confluence, Bitbucket, Bamboo, or Crowd yourself, update them now from Atlassian’s advisory. Atlassian Cloud users can skip — the vendor handles it.
What this means for you — MSP:Scan client estates for self-hosted Atlassian Data Center/Server products and schedule the July 21 patches; Cloud-only clients need no action from you.
What this means for you — Researcher:Atlassian published fixes on July 21 for multiple Data Center/Server products, including critical issues; CCCS AV26-731 is the summary advisory.