Seems like the vulnerability is that hidden characters can be added to code, which will not show up in the web interfaces of the products affected (JIRA, Conflu

Seems like the vulnerability is that hidden characters can be added to code, which will not show up in the web interfaces of the products affected (JIRA, Confluence, Bitbucket, Bamboo, pretty much the whole Atlassian suite). > A vulnerability has been identified affecting multiple Atlassian products where special characters, known as Unicode bidirectional override characters, are not rendered or displayed in the affected applications. These special characters are typically not displayed by the browser or code editors but can affect the meaning of the source code when it is processed by a compiler or an interpreter. I guess you could potentially sneak in code without anyone noticing. You'd have to have commit access to exploit this, though, I suppose.