Atlassian Jira: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• High 7.5
  CVE-2025-24970

  SslHandler doesn't correctly validate packets which can lead to native crash when using native SSLEngine

  Netty, an asynchronous, event-driven network application framework, has a vulnerability starting in version 4.1.91.Final and prior to version 4.1.118.Final. When a special crafted packet is received via SslHandler it doesn't correctly handle validation of suc…

  netty netty druid thingsboard-tb-node Ubuntu Wolfi Maven
  Feb 10, 2025
• High 7.2
  CVE-2025-22157

  This High severity PrivEsc (Privilege Escalation) vulnerability was introduced in versions: 9.12.0, 10.3.0, 10.4.0, and…

  Atlassian Jira Service Management Data Center Jira Service Management Server Jira Core Server Web / CMS
  May 20, 2025

Revision history

1. 2025-05-20 #1

   Initiale Fassung

References

• Atlassian Security Advisory vom 2025-05-20
  https://jira.atlassian.com/browse/JSWSERVER-26383
• Atlassian Security Advisory vom 2025-05-20
  https://jira.atlassian.com/browse/JRASERVER-78766