CPE Details
Atlassian Jira Server 8.13.22
8.13.22
2022-07-12
08h35 +00:00
08h35 +00:00
2022-07-20
16h40 +00:00
16h40 +00:00
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
CPE Name: cpe:2.3:a:atlassian:jira_server:8.13.22:*:*:*:*:*:*:*
Informations
Vendor
atlassianProduct
jira_serverVersion
8.13.22Related CVE
| CVE ID | Published | Description | Score | Severity |
|---|---|---|---|---|
| Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting (RXSS) vulnerability in the TeamManagement.jspa endpoint. The affected versions are before version 8.20.8. | 6.1 |
Medium |
||
| Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20.7. | 4.3 |
Medium |
||
| The MessageBundleWhiteList class of atlassian-gadgets before version 4.2.37, from version 4.3.0 before 4.3.14, from version 4.3.2.0 before 4.3.2.4, from version 4.4.0 before 4.4.12, and from version 5.0.0 before 5.0.1 allowed unexpected DNS lookups and requests to arbitrary services as it incorrectly obtained application base url information from the executing http request which could be attacker controlled. | 5 |
Medium |
