{"id":54817,"date":"2023-12-06T14:31:58","date_gmt":"2023-12-06T14:31:58","guid":{"rendered":"https:\/\/packetstormsecurity.com\/news\/view\/35268\/Atlassian-Security-Advisory-Reveals-Four-Fresh-Critical-Flaws.html"},"modified":"2023-12-06T14:31:58","modified_gmt":"2023-12-06T14:31:58","slug":"atlassian-security-advisory-reveals-four-fresh-critical-flaws","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/atlassian-security-advisory-reveals-four-fresh-critical-flaws\/","title":{"rendered":"Atlassian Security Advisory Reveals Four Fresh Critical Flaws"},"content":{"rendered":"

Atlassian has emailed its customers to warn of four critical vulnerabilities, but the message had flaws of its own \u2013 the links it contained weren’t live for all readers at the time of despatch.<\/p>\n

The email, seen by The Register<\/i>, warns of flaws rated 9.0 or higher on the Common Vulnerability Scoring System (CVSS) scale and offers a link to an advisory.<\/p>\n

But that link was to a page that did not describe the relevant flaws, instead detailing CVE-2023-22518<\/a>, the 9.1-rated stinker revealed in late October and later upgraded<\/a> to a perfect 10\/10. Nor did links to the four CVEs the email mentions reach the correct page for around an hour \u2013 all produced a Page Not Found error and a suggestion that the page may have been renamed with another URL that does carry the correct information.<\/p>\n