Bamboo

Reported Context (2)

Crowd 7.1 release notes date to November 27, 2025, more than 10 months before the flaw was disclosed. For Bamboo, one field said 10.2.4, while the record's own description said 10.2.24. Critical Atlassian Flaw Allows Unauthenticated File Reads Across Eight Self-Hosted Products
Azure DevOps, AWS CodeBuild, Buildkite, AppVeyor, Bitbucket Pipelines, Drone, Semaphore, TeamCity, Bamboo, Bitrise, Vercel, Netlify, and Cloudflare Pages. Mini Shai-Hulud Compromises 639 npm Package Versions in AntV-Heavy Campaign

CVE (2)

Malware (1)

MITRE ATT&CK (9)

Vendors (1)

Products (29)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.