Bamboo had a resource that deserialised arbitrary user input without restriction. Attackers can use this vulnerability to execute Java code of their choice on systems that have a vulnerable version of Bamboo. To exploit this issue, attackers need to be able to access the Bamboo JMS port (port 54663 by default).
Affected versions:
\
Fix:
\
For additional details see the [full advisory|https://confluence.atlassian.com/x/VzlZLw].