Description
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Regex-based Denial of Service (DoS) vulnerability in JQL version searching. The affected versions are before version 7.13.16; from version 7.14.0 before 8.5.7; from version 8.6.0 before 8.10.2; and from version 8.11.0 before 8.11.1.
Analysis
No analysis available yet.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Atlassian | Jira Server | affected |
|
Configuration 1 [-]
|
No data.
No data available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2020-6334 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Regex-based Denial of Service (DoS) vulnerability in JQL version searching. The affected versions are before version 7.13.16; from version 7.14.0 before 8.5.7; from version 8.6.0 before 8.10.2; and from version 8.11.0 before 8.11.1. |
References
| Link | Providers |
|---|---|
| https://jira.atlassian.com/browse/JRASERVER-71388 |
|
History
No history.
MITRE
Status: PUBLISHED
Assigner: atlassian
Published:
Updated: 2024-09-17T01:00:48.724Z
Reserved: 2020-06-16T00:00:00.000Z
Link: CVE-2020-14177
Vulnrichment
No data.
NVD
Status : Modified
Published: 2020-09-21T01:15:12.880
Modified: 2024-11-21T05:02:48.197
Link: CVE-2020-14177
Redhat
No data.
OpenCVE Enrichment
No data.
Weaknesses