Is View PMD/PHPMD for Bamboo plugin for Bamboo affected by Spring4Shell vulnerability (CVE-2022-22965)

Issue #10 resolved
Former user created an issue

Hi, We are using View PMD/PHPMD for Bamboo plugin (v4.12.0.10) for Bamboo (v8.0.4) but we would need your confirmation whether this plugin has got any impact due to security vulnerability - https://github.com/advisories/GHSA-36p3-wjmg-h94x (Spring4Shell)?

Regards

Comments (1)

  1. Markus Schulte repo owner

    Hi,

    this plugin is not using Spring, so it is not affected by "Spring4Shell". But I do not know, if Bamboo server itself is affected.

    Best, Markus

  2. Log in to comment