Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-70808
HistoryMar 23, 2020 - 1:50 a.m.

DoS through Jira Gadget API - CVE-2019-20899

2020-03-2301:50:27
security-metrics-bot
jira.atlassian.com
88

0.002 Low

EPSS

Percentile

59.0%

The Gadget API in Atlassian Jira Server and Data Center in affected versions allows remote attackers to make Jira unresponsive via repeated requests to a certain endpoint in the Gadget API.

Affected versions:

  • version < 8.5.4
  • 8.6.0

Fixed versions:

This is fixed in versions 8.5.4, 8.6.1 and 8.7.0.

0.002 Low

EPSS

Percentile

59.0%

Related for ATLASSIAN:JRASERVER-70808