Atlassian Jira: Mehrere Schwachstellen ermöglichen Denial of Service

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2021-33813 EPSS 19%

  XML External Entity (XXE) Injection in JDOM

  An XXE issue in SAXBuilder in JDOM through 2.0.6 allows attackers to cause a denial of service via a crafted HTTP request.

  libjdom2-java org.jdom:jdom jdom2 libjdom1-java Debian Ubuntu Azure Linux Maven
  Jun 16, 2021
• High 7.5
  CVE-2024-57699

  Netplex Json-smart Uncontrolled Recursion vulnerability

  A security issue was found in Netplex Json-smart 2.5.0 through 2.5.1. When loading a specially crafted JSON input, containing a large number of ’{’, a stack exhaustion can be trigger, which could allow an attacker to cause a Denial of Service (DoS). This issu…

  trino trino-plugin-opensearch trino-plugin-pinot trino-plugin-lakehouse Debian Ubuntu Wolfi Maven
  Feb 5, 2025

Revision history

1. 2025-04-15 #1

   Initiale Fassung

References

• Public Security Vulnerability vom 2025-04-15
  https://jira.atlassian.com/browse/JRASERVER-78717
• Public Security Vulnerability vom 2025-04-15
  https://jira.atlassian.com/browse/JSWSERVER-26359
• Public Security Vulnerability vom 2025-04-15
  https://jira.atlassian.com/browse/JSDSERVER-16154
• Public Security Vulnerability vom 2025-04-15
  https://jira.atlassian.com/browse/JSDSERVER-16144
• Security Bulletin - April 15 2025 vom 2025-04-15
  https://confluence.atlassian.com/security/security-bulletin-april-15-2025-1540723536.html