Medium WID-SEC-2024-1631 1 CVE

Atlassian Jira Software: Schwachstelle ermöglicht Denial of Service

Published Jul 16, 2024 · Updated Jul 16, 2024 · de-DE

Vendor: Atlassian Product: Jira Software Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter anonymer Angreifer kann eine Schwachstelle in der Atlassian Jira Software ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen.

Product

Jira ist eine Webanwendung zur Softwareentwicklung.

Vulnerabilities 1

High 8.2

CVE-2022-41966 Public exploit

XStream Denial of Service via stack overflow

XStream serializes Java objects to XML and back again. Versions prior to 1.4.20 may allow a remote attacker to terminate the application with a stack overflow error, resulting in a denial of service only via manipulation the processed input stream. The attack…

x-stream xstream libxstream-java com.thoughtworks.xstream:xstream Debian Ubuntu Maven

Dec 27, 2022

Revision history

2024-07-16 #1
Initiale Fassung

References

Jira Data Center and Server vom 2024-07-16
https://jira.atlassian.com/browse/JSWSERVER-25951
Jira Service Management Data Center and Server vom 2024-07-16
https://jira.atlassian.com/browse/JSDSERVER-15436
Atlassian Security Bulletin vom 2024-07-16
https://confluence.atlassian.com/security/security-bulletin-july-16-2024-1417150917.html