6.8.x
6.8.2.1-p4
Remote Code Execution Vulnerability
SRBAM-243 - A security vulnerability for remote code execution has been fixed.
A malicious authenticated Bamboo user could exploit this vulnerability to run arbitrary code inside the Bamboo Server instance.
This security vulnerability has been fixed in ScriptRunner for Bamboo 6.8.2.1-p4. It is recommended all customers upgrade to 6.8.2.1-p4+ where possible.
Changes to Scriptable and Conditional tasks
SRBAM-241 - Configuring scriptable and conditional tasks no longer requires global administrator permission
In prior versions scriptable and conditional tasks were only permitted to be configured by global administrators. From version 6.24.0 onward scriptable and conditional tasks can be configured by any user who is permitted to modify task configurations in a plan.
The global administrator permission requirement was removed because Bamboo does not have a mechanism for enforcing such permission checking consistently for all methods of modifying a plan.
More information on task security can be found here: Security Considerations
6.8.0
Hello! Welcome to the first non-beta release of ScriptRunner for Bamboo!
To start, you can explore these features:
Script Console: Learn and experiment with the Bamboo API.
Built-In Scripts: Help get you started with the product.
Listeners: Perform custom actions whenever standard Bamboo system events are fired.
Script Fragments: Customize the UI.
Script Jobs: Run script actions at a specified time interval.
REST Endpoints: Run a script with a URL.
Script Editor: Manage all of your script files and folders.
Condition Tasks: Add logic to your build to avoid a rapid increase of plans or wrapping everything with script tasks.
Scripted Tasks: Create and execute tasks with different parameters based on build variables.
These features are in addition to ScriptRunner features you know, like Execution History and Advanced Logging.
If you have any questions, please contact ScriptRunner for Bamboo Support here!