Medium WID-SEC-2023-2391 1 CVE

Atlassian Jira Software: Schwachstelle ermöglicht Denial of Service

Published Sep 19, 2023 · Updated Sep 19, 2023 · de-DE

Vendor: Atlassian Product: Jira Software Product: Jira Software Service Management Data Center and Server < 4.20.25 Product: Jira Software Service Management Data Center and Server < 5.10.1 Product: Jira Software Service Management Data Center and Server < 5.11.0 Product: Jira Software Service Management Data Center and Server < 5.4.9 Product: Jira Software Service Management Data Center and Server < 5.9.2 Platform: Linux Platform: macOS

Summary

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Atlassian Jira Software ausnutzen, um einen Denial of Service Angriff durchzuführen.

Product

Jira ist eine Webanwendung zur Softwareentwicklung.

Vulnerabilities 1

High 7.7

CVE-2022-25647 EPSS 12%

Deserialization of Untrusted Data

The package com.google.code.gson:gson before 2.8.9 are vulnerable to Deserialization of Untrusted Data via the writeReplace() method in internal classes, which may lead to DoS attacks.

openjdk11 openjdk17 trino openjdk15 Debian Ubuntu Alpine Wolfi Maven

May 1, 2022

Revision history

2023-09-19 #1
Initiale Fassung

References

Atlassian Jira Security Notification vom 2023-09-19
https://jira.atlassian.com/browse/JSDSERVER-14007