Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-27719

XML Vulnerability in JIRA

    XMLWordPrintable

Details

    Description

      We have identified and fixed a vulnerability in JIRA that results from the way third-party XML parsers are used in JIRA. This vulnerability allows an attacker who is an authenticated JIRA user to execute denial of service attacks against the JIRA server.

      All versions of JIRA up to and including 5.0.0 are affected.

      Full details of the severity, risks and vulnerability can be found in the JIRA Security Advisory 2012-05-17.

      Attachments

        Issue Links

          Activity

            People

              vosipov VitalyA
              alui Andrew
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: