Authentication flaw

2020-07-1301:15:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.2%

JSON

The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote attackers to achieve Denial of Service via a crafted PNG file. The affected versions are before version 8.5.4, from version 8.6.0 before 8.6.2, and from version 8.7.0 before 8.7.1.

CPENameOperatorVersion
jiralt8.5.4
jira_data_centerge8.6.0
jira_data_centerlt8.6.2
jira_data_centerge8.7.0
jira_data_centerlt8.7.1
jira_serverge8.7.0
jira_serverlt8.7.1
jira_serverge8.6.0
jira_serverlt8.6.2
jira_software_data_centerlt8.5.4

Name	Operator	Version
jira	lt	8.5.4
jira_data_center	ge	8.6.0
jira_data_center	lt	8.6.2
jira_data_center	ge	8.7.0
jira_data_center	lt	8.7.1
jira_server	ge	8.7.0
jira_server	lt	8.7.1
jira_server	ge	8.6.0
jira_server	lt	8.6.2
jira_software_data_center	lt	8.5.4

References

jira.atlassian.com/browse/JRASERVER-70813