Lucene search
AtlassianCVELIST:CVE-2019-20897HistoryMar 24, 2020 - 12:00 a.m.
CVE-2019-20897
2020-03-2400:00:00
atlassian
www.cve.org
0.001 Low
EPSS
Percentile
50.2%
The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achieve Denial of Service via a crafted PNG file. The affected versions are before version 8.5.4, from version 8.6.0 before 8.6.2, and from version 8.7.0 before 8.7.1.
CNA Affected
[
{
"product": "Jira Server",
"vendor": "Atlassian",
"versions": [
{
"lessThan": "8.5.4",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "8.6.0",
"versionType": "custom"
},
{
"lessThan": "8.6.2",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "8.7.0",
"versionType": "custom"
},
{
"lessThan": "8.7.1",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
nessus
nessus
Atlassian Jira 8.6.0 < 8.7.1 Multiple Vulnerabilities
2023-03-14 00:00:00
Atlassian Jira 7.0.6 < 8.5.4 Multiple Vulnerabilities
2023-03-14 00:00:00
cve
cve
CVE-2019-20897
2020-07-13 01:15:11
atlassian
atlassian
DoS in avatar upload via crafted PNG file - CVE-2019-20897
2020-03-24 01:35:44
DoS in avatar upload via crafted PNG file - CVE-2019-20897
2020-03-24 01:35:44
nvd
nvd
CVE-2019-20897
2020-07-13 01:15:11
prion
prion
Authentication flaw
2020-07-13 01:15:00