Description

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability in the /rest/gadget/1.0/createdVsResolved/generate endpoint. The affected versions are before version 8.16.0.

Remediation

References

CVE-2021-39123

Related Vulnerabilities

WordPress Plugin WordPress Download Manager Directory Traversal (2.6.95)

WordPress 4.1.x Directory Traversal (4.1 - 4.1.40)

Liferay DXP Incorrect Default Permissions Vulnerability (CVE-2022-42130)

Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-33194)

Chamilo Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2023-3533)

Severity

High

Classification

CVE-2021-39123

Tags

Missing Update Known Vulnerabilities