Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-70813
HistoryMar 24, 2020 - 1:35 a.m.

DoS in avatar upload via crafted PNG file - CVE-2019-20897

2020-03-2401:35:44
security-metrics-bot
jira.atlassian.com
82

0.001 Low

EPSS

Percentile

50.2%

The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achieve Denial of Service via a crafted PNG file.

Affected versions

  • version < 8.5.4
  • 8.6.0 ≤ version ≤ 8.7.0
  • 8.7.0 ≤ version < 8.7.1

Fixed versions

  • 8.5.4
  • 8.7.1
  • 8.8.0

0.001 Low

EPSS

Percentile

50.2%

Related for ATLASSIAN:JRASERVER-70813