This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has been implemented.

Affected versions of Atlassian Jira Software Server and Data Center allow a system administrator to execute arbitrary code via a remote code execution in the Email Templates feature.

Affected versions:

• version < 8.13.19,
• 8.14.0 ≤ version < 8.20.7,
• 8.21.0 ≤ version < 8.22.1,
• 8.23.0 ≤ version < 9.0.0

Fixed versions:

• 8.13.19,
• 8.20.7,
• 8.22.1,
• 9.0.0