Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-70883
HistoryApr 08, 2020 - 3:13 a.m.

DoS via missing input validation in UserPickerBrowser.jspa - CVE-2019-20413

2020-04-0803:13:21
security-metrics-bot
jira.atlassian.com
62

0.003 Low

EPSS

Percentile

65.4%

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application’s availability via a Denial of Service (DoS) vulnerability on the UserPickerBrowser.jspa page.

Affected versions:

  • version < 7.13.9
  • 8.0.0 ≤ version < 8.4.2

Fixed versions:

  • 7.13.9
  • 8.4.2
  • 8.5.0

0.003 Low

EPSS

Percentile

65.4%

Related for ATLASSIAN:JRASERVER-70883