Description

The Gadget API in Atlassian Jira Server and Data Center in affected versions allows remote attackers to make Jira unresponsive via repeated requests to a certain endpoint in the Gadget API. The affected versions are before version 8.5.4, and from version 8.6.0 before 8.6.1.

Remediation

References

CVE-2019-20899

Related Vulnerabilities

WordPress Plugin UpdraftPlus WordPress Backup Multiple Vulnerabilities (1.16.58)

MediaWiki Improper Access Control Vulnerability (CVE-2016-6331)

jQuery Validation Uncontrolled Resource Consumption Vulnerability (CVE-2021-21252)

PHP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2015-6833)

SugarCRM Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-5715)

Severity

Medium

Classification

CVE-2019-20899

Tags

Missing Update Known Vulnerabilities