Description

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the /rest/gadget/1.0/createdVsResolved/generate endpoint. The affected versions are before version 8.16.0.

Remediation

References

CVE-2021-39123

Related Vulnerabilities

WordPress Plugin DB Backup Directory Traversal (4.5)

Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-5519)

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2014-3545)

Oracle JRE CVE-2013-1564 Vulnerability (CVE-2013-1564)

WordPress Plugin Magn WP Drag and Drop Upload Arbitrary File Upload (1.1.4)

Severity

High

Classification

CVE-2021-39123

Tags

Missing Update Known Vulnerabilities