CVE-2020-36232

🗓️ 22 Feb 2021 20:46:59Reported by atlassianType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 57 Views

Atlassian-gadgets prior to 5.0.1 allows unexpected DNS lookups and requests to arbitrary services via MessageBundleWhiteList class

Reporter	Title	Published	Views	Family All 11
Atlassian	Jira bundles a vulnerable version of atlassian-gadgets - CVE-2020-36232	25 Jan 202107:02	–	atlassian
Atlassian	Jira bundles a vulnerable version of atlassian-gadgets - CVE-2020-36232	25 Jan 202107:02	–	atlassian
Circl	CVE-2020-36232	23 Feb 202100:33	–	circl
CNNVD	Jira atlassian-gadgets Code Issue Vulnerability	22 Feb 202100:00	–	cnnvd
Cvelist	CVE-2020-36232	22 Feb 202120:46	–	cvelist
EUVD	EUVD-2020-23777	7 Oct 202500:30	–	euvd
NVD	CVE-2020-36232	22 Feb 202121:15	–	nvd
Prion	Design/Logic Flaw	22 Feb 202121:15	–	prion
Tenable Nessus	Atlassian Jira < 8.5.10 Server-Side Request Forgery	2 Jul 202100:00	–	nessus
Tenable Nessus	Atlassian Jira 8.6.x < 8.13.2 Server-Side Request Forgery	2 Jul 202100:00	–	nessus

NVD

Node

atlassian atlassian-gadgetsRange<4.2.37atlassian

atlassian atlassian-gadgetsRange4.3.0–4.3.14atlassian

atlassian atlassian-gadgetsRange4.3.2.0–4.3.2.4atlassian

atlassian atlassian-gadgetsRange4.4.0–4.4.12atlassian

atlassian atlassian-gadgetsRange5.0.0–5.0.1atlassian

AND

atlassian data_centerRange8.5.11–8.13.2

atlassian data_centerRange8.13.3–8.14.1

atlassian jira_data_centerMatch8.15.0

atlassian jira_serverRange8.5.11–8.13.2

atlassian jira_serverRange8.13.3–8.14.1

atlassian jira_serverMatch8.15.0

[
  {
    "product": "Atlassian Gadgets",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "4.2.37",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.3.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.14",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.3.2.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.3.2.4",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "lessThan": "unspecified",
        "status": "affected",
        "version": "4.4.0",
        "versionType": "custom"
      },
      {
        "lessThan": "4.4.12",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "5.0.0"
      }
    ]
  }
]

Source	Link
jira	www.jira.atlassian.com/browse/JRASERVER-72025

21 Nov 2024 05:29Current

5Medium risk

Vulners AI Score5

CVSS 24

CVSS 3.15

EPSS0.00103

CWE-918