ATLASSIAN ANNOUNCES FIXES FOR FOUR CRITICAL RCE VULNERABILITIES

Summary from the TLDR InfoSec newsletter

Atlassian has released fixes for four different vulnerabilities in various products that each could be utilized to achieve RCE. The flaws include a vulnerability in a third-party deserialization library, a template injection flaw in Confluence, an Assets Discovery flaw that could allow RCE on any machines with the agent installed, and a flaw that could allow for RCE via WebSockets to bypass Atlassian Companion’s blocklist and MacOS Gatekeeper.