2020-11-12

Subversion ALM is subscribed to Atlassian’s Bug Bounty program and some vulnerable locations have been reported. Now, the atls_token is required from a lot of locations to protect against data modification via CSRF attacks.

Please upgrade to the 9.0.8 version to fix them.

2020-10-11

More XSS and IDOR vulnerabilities have been reported and fixed in this third round by the seam team of ethical hackers.

...