{"vulnerability": "CVE-2024-21677", "sightings": [{"uuid": "0dbc4fe7-85ec-4d80-a97c-4f1f95d549a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21677", "type": "seen", "source": "https://t.me/kasperskyb2b/1191", "content": "\ud83e\ude79\ud83e\ude79 \u0414\u0432\u0430 Patch Tuesday \u043f\u043e \u0446\u0435\u043d\u0435 \u043e\u0434\u043d\u043e\u0433\u043e \u2014  \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0435\u043c Chrome, Firefox, Bamboo, Bitbucket, Confluence \u0438  Jira \n\n\u0412\u0442\u043e\u0440\u043d\u0438\u043a \u043e\u043a\u0430\u0437\u0430\u043b\u0441\u044f \u0431\u043e\u0433\u0430\u0442 \u043d\u0430 \u0432\u0430\u0436\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438.\n\u041e\u0434\u043d\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u0438\u043b\u0438\u0441\u044c Chrome \u0438 Firefox, \u043d\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0440\u0430\u0437\u043d\u044b\u0435. \u0412 Chrome \u0437\u0430\u043a\u0440\u044b\u0442\u043e 12 \u0434\u044b\u0440, \u043d\u043e \u0432\u0441\u0435\u0433\u043e \u043e\u0434\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f. \u0412 Firefox \u0442\u0430\u043a\u0436\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b 12 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432, \u043d\u043e \u0442\u043e\u043b\u044c\u043a\u043e 4 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u043e\u0446\u0435\u043d\u043a\u0443 \u043a\u0440\u0438\u0442\u0438\u0447\u043d\u043e\u0441\u0442\u0438 \u00ab\u0432\u044b\u0441\u043e\u043a\u0430\u044f\u00bb. \n\u0421\u0443\u0434\u044f \u043f\u043e \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u044f\u043c, \u043d\u0438 \u043e\u0434\u043d\u0430 \u0438\u0437 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430\u0441\u044c \u043a\u0430\u043a \u0437\u0438\u0440\u043e\u0434\u0435\u0439.\n\n\u0412 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 Atlassian \u043e\u043f\u0438\u0441\u0430\u043d\u044b 25 \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432 \u0438\u0445 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430\u0445.\n\u041d\u0430\u0438\u0431\u043e\u043b\u0435\u0435 \u043f\u0443\u0433\u0430\u044e\u0449\u0430\u044f \u043d\u0430 \u0432\u0438\u0434 CVE-2024-1597 (CVSS 10) \u0432 Bamboo Data Center & Server \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u043c \u0432 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0435 PostgreSQL, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0432 \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0435 Atlassian \u043f\u043e \u0443\u0432\u0435\u0440\u0435\u043d\u0438\u044f\u043c \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043d\u0435\u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e \u043f\u0440\u043e\u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c.  \u041f\u043e\u0432\u0435\u0440\u0438\u043c, \u0438 \u0441\u043e\u0441\u0440\u0435\u0434\u043e\u0442\u043e\u0447\u0438\u043c\u0441\u044f \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u2014 \u043e\u0431\u0445\u043e\u0434 \u043f\u0443\u0442\u0438 \u0432 Confluence Data Center (CVE-2024-21677, CVSS 8.3). \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u043f\u0438\u0441\u0430\u043d\u0430 \u0432 \u0431\u044e\u043b\u043b\u0435\u0442\u0435\u043d\u0435 \u0441\u0443\u0433\u0443\u0431\u043e \u0444\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e, \u043d\u043e \u043c\u0435\u0436\u0434\u0443 \u0441\u0442\u0440\u043e\u043a \u0447\u0438\u0442\u0430\u0435\u0442\u0441\u044f, \u0447\u0442\u043e \u043d\u0435\u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u0442\u044c \u0437\u0430\u043f\u0438\u0441\u044c \u0432 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u0435 \u043f\u0430\u043f\u043a\u0438. \n\n\u0412\u0441\u0435\u0433\u043e \u0432 Jira Software Data Center and Server \u0437\u0430\u043a\u0440\u044b\u0442\u043e 20 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0451\u0437\u043d\u043e\u0441\u0442\u0438, \u0432\u043a\u043b\u044e\u0447\u0430\u044f 3 RCE, 16 DoS \u0438 1 SSRF. \n\n\u0417\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0435 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0434\u0440\u0443\u0433\u0438\u0445 \u0434\u0435\u0444\u0435\u043a\u0442\u043e\u0432 (\u0432\u0441\u0435 \u2014 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u0430\u0445) \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u043e\u0442\u043a\u0430\u0437\u0443 \u0432 \u043e\u0431\u0441\u043b\u0443\u0436\u0438\u0432\u0430\u043d\u0438\u0438 \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Bitbucket Data Center and Server \u0438 Bamboo Data Center and Server. \n\n\u0421\u0443\u0434\u044f \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c Atlassian, \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0432 \u0440\u0435\u0430\u043b\u044c\u043d\u044b\u0445 \u0430\u0442\u0430\u043a\u0430\u0445. \n\n#\u043d\u043e\u0432\u043e\u0441\u0442\u0438 @\u041f2\u0422", "creation_timestamp": "2024-03-21T07:08:50.000000Z"}, {"uuid": "4b8c28bc-adfe-43d3-8398-22fc3b6ddc5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21677", "type": "seen", "source": "https://t.me/ctinow/211805", "content": "https://ift.tt/GV37nJt\nCVE-2024-21677", "creation_timestamp": "2024-03-19T18:26:54.000000Z"}, {"uuid": "15b2157c-0a48-4828-af06-b22e8ee73e9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21677", "type": "seen", "source": "https://t.me/cyberwarehouse/362", "content": "CVE-2024-21677: Path Traversal in Atlassian Confluence, 8.3 rating\u2757\n\nThe vulnerability discovered during the Bug Bounty program allows an unauthenticated attacker to carry out actions that threaten the confidentiality and availability of the system. The patch has already been released.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/mghaY\n\ud83d\udc49 Dork: http.meta:\"confluence-base-url\"\n\nVendor's bulletin: https://confluence.atlassian.com/security/security-bulletin-march-19-2024-1369444862.html", "creation_timestamp": "2026-07-17T11:00:05.643667Z"}, {"uuid": "070406f9-d437-4e55-a231-951d574ac54c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-21677", "type": "seen", "source": "https://t.me/cyberwarehouse/362", "content": "CVE-2024-21677: Path Traversal in Atlassian Confluence, 8.3 rating\u2757\n\nThe vulnerability discovered during the Bug Bounty program allows an unauthenticated attacker to carry out actions that threaten the confidentiality and availability of the system. The patch has already been released.\n\nSearch at Netlas.io:\n\ud83d\udc49 Link: https://nt.ls/mghaY\n\ud83d\udc49 Dork: http.meta:\"confluence-base-url\"\n\nVendor's bulletin: https://confluence.atlassian.com/security/security-bulletin-march-19-2024-1369444862.html", "creation_timestamp": "2026-07-18T00:00:32.948914Z"}]}