Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
atlassianC3678a055509JRASERVER-77558
HistoryMar 21, 2024 - 6:45 p.m.

Jira - CVE-2024-22243

2024-03-2118:45:13
c3678a055509
jira.atlassian.com
70
jira data center
vulnerability
cve-2024-22243
security scan tool
not vulnerable
workaround
software

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON

h3. Issue Summary

We have several Customers waiting for a response about the vulnerability [CVE-2024-22243|https://nvd.nist.gov/vuln/detail/CVE-2024-22243], if it affects Atlassian products, in particular, Jira Data Center.
h3. Steps to Reproduce

Run Generic Security Scan Tool
h3. Expected Results

Not Vulnerable
h3. Actual Results

Vulnerable
h3. Workaround

Currently there is no known workaround for this behavior. A workaround will be added here when available.

Related

openvas 8
github 3
osv 6
cgr 1
atlassian 7
ibm 16
veracode 2
redhatcve 1
debiancve 3
prion 1
f5 1
nvd 3
githubexploit 1
wolfi 1
ubuntucve 3
nessus 1
cvelist 3
cve 3
vulnrichment 1
hackerone 1
redhat 1
oracle 1
openvas
openvas
VMware Spring Framework < 5.3.32, 6.0.x < 6.0.17, 6.1.x < 6.1.4 Open Redirect / SSRF Vulnerability - Windows
2024-02-22 00:00:00
VMware Spring Framework < 5.3.32, 6.0.x < 6.0.17, 6.1.x < 6.1.4 Open Redirect / SSRF Vulnerability - Linux
2024-02-22 00:00:00
VMware Spring Boot < 2.7.20.1, 3.0.x < 3.0.15.1, 3.1.x < 3.1.10, 3.2.x < 3.2.4 SSRF Vulnerability - Windows
2024-03-18 00:00:00
github
github
Spring Web vulnerable to Open Redirect or Server Side Request Forgery
2024-02-23 06:30:31
Spring Framework URL Parsing with Host Validation Vulnerability
2024-03-16 06:30:27
Spring Framework URL Parsing with Host Validation
2024-04-16 06:30:28
osv
osv
Spring Web vulnerable to Open Redirect or Server Side Request Forgery
2024-02-23 06:30:31
CVE-2024-22243
2024-02-23 05:15:08
CVE-2024-22259
2024-03-16 05:15:20
cgr
cgr
CVE-2024-22243 vulnerabilities
2024-05-19 03:07:16
atlassian
atlassian
SSRF (Server-Side Request Forgery) org.springframework:spring-web Dependency in Bamboo Data Center and Server
2024-04-11 08:11:41
SSRF (Server-Side Request Forgery) org.springframework:spring-web Dependency in Confluence Data Center and Server
2024-06-07 04:11:42
Bitbucket is affected by CVE-2024-22243
2024-03-13 15:04:41
ibm
ibm
Security Bulletin: Spring vulnerability in embedded components may affect IBM Business Automation Workflow - CVE-2024-22243
2024-06-11 09:50:01
Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in spring-web-5.3.15.jar
2024-06-05 20:40:33
Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to open redirect vulnerability in VMware Tanzu Spring Framework ( CVE-2024-22243)
2024-06-21 15:14:57
veracode
veracode
Server Side Request Forgery (SSRF)
2024-02-26 05:35:16
Server Side Request Forgery (SSRF)
2024-03-20 06:01:52
redhatcve
redhatcve
CVE-2024-22243
2024-02-23 21:31:38
debiancve
debiancve
CVE-2024-22243
2024-02-23 05:15:08
CVE-2024-22259
2024-03-16 05:15:20
CVE-2024-22262
2024-04-16 06:15:46
prion
prion
Open redirect
2024-02-23 05:15:00
f5
f5
K000139218 : CVE-2024-22243 Spring Framework vulnerability
2024-04-09 00:00:00
nvd
nvd
CVE-2024-22243
2024-02-23 05:15:08
CVE-2024-22259
2024-03-16 05:15:20
CVE-2024-22262
2024-04-16 06:15:46
githubexploit
githubexploit
Exploit for CVE-2024-22243
2024-02-21 12:55:22
wolfi
wolfi
CVE-2024-22243 vulnerabilities
2024-06-22 21:09:10
ubuntucve
ubuntucve
CVE-2024-22243
2024-02-23 00:00:00
CVE-2024-22259
2024-03-16 00:00:00
CVE-2024-22262
2024-04-16 00:00:00
nessus
nessus
Oracle Primavera Unifier Open Redirect (April 2024 CPU)
2024-04-17 00:00:00
cvelist
cvelist
CVE-2024-22243 CVE-2024-22243: Spring Framework URL Parsing with Host Validation
2024-02-23 05:03:54
CVE-2024-22259 CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)
2024-03-16 04:40:08
CVE-2024-22262 CVE-2024-22262: Spring Framework URL Parsing with Host Validation
2024-04-16 05:54:12
cve
cve
CVE-2024-22243
2024-02-23 05:15:08
CVE-2024-22259
2024-03-16 05:15:20
CVE-2024-22262
2024-04-16 06:15:46
vulnrichment
vulnrichment
CVE-2024-22259 CVE-2024-22259: Spring Framework URL Parsing with Host Validation (2nd report)
2024-03-16 04:40:08
hackerone
hackerone
curl: Incorrect Type Conversion in interpreting IPv4-mapped IPv6 addresses and below `curl` results in indeterminate SSRF vulnerabilities.
2024-05-07 15:11:55
redhat
redhat
(RHSA-2024:3354) Important: Red Hat Fuse 7.13.0 release and security update
2024-05-23 22:44:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2024
2024-04-16 00:00:00

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

JSON
Related for JRASERVER-77558
openvas8github3osv6cgr1atlassian7ibm16veracode2redhatcve1debiancve3prion1f51nvd3githubexploit1wolfi1ubuntucve3nessus1cvelist3cve3vulnrichment1hackerone1redhat1oracle1