Atlassian · Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software Data Center, Bamboo Data Center, Crowd Data Center, Crucible, Fisheye
Updated October 17, 2026
Multiple Atlassian Data Center products expose internal files and directories to the internet due to insufficient access controls. Attackers can directly request files from the web‑application root, potentially leaking configuration data, source code, or credential files.
Exposed files may contain API keys, database connection strings, or proprietary source code, facilitating credential theft and subsequent lateral movement.
Patch all listed Atlassian products to the latest release; verify that sensitive directories are blocked by web‑server access rules and conduct a file‑exposure scan.
More active vulnerabilities