Affected versions of Atlassian Jira Server and Data Center used versions of Apache Tomcat that were vulnerable to CVE-2020-9484 and CVE-2022-23181.

The affected versions of Jira Server and Data Center are before version 8.13.20, from version 8.14.0 before 8.20.8, from version 8.21.0 before 8.22.2, and from version 8.23.0 before 9.0.0.

Affected versions:

• version < 8.13.20
• 8.14.0 ≤ version < 8.20.8
• 8.21.0 ≤ version < 8.22.2
• 8.23.0 ≤ version < 9.0.0

Fixed versions:

• 8.13.20
• 8.20.8
• 8.22.2
• 9.0.0