Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the instance via an Application Denial of Service vulnerability in the /rendering/wiki endpoint. The affected versions are before version 8.8.0.

Remediation

References

CVE-2019-20418

Related Vulnerabilities

WordPress Plugin Pods-Custom Content Types and Fields Malicious Code (3.2.3)

WordPress Plugin Events Manager 'events-manager.php' SQL Injection (2.1)

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-13762)

Oracle Application Server CVE-2009-1009 Vulnerability (CVE-2009-1009)

WordPress Plugin Cimy User Extra Fields Denial of Service (2.6.3)

Severity

Medium

Classification

CVE-2019-20418

Tags

Missing Update Known Vulnerabilities