CVE-2015-6576
Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource.
Date published : 2017-10-02
http://www.securityfocus.com/archive/1/536747/100/0/threaded
