• Type: Public Security Vulnerability
• Resolution: Fixed
• Priority: High
• Fix Version/s: 5.16.0, 5.4.21, 5.12.8
• Affects Version/s: 5.4.0, (32)
  5.4.1, 5.4.2, 5.4.3, 5.4.4, 5.4.5, 5.4.6, 5.4.7, 5.4.8, 5.4.9, 5.4.10, 5.12.0, 5.4.11, 5.4.12, 5.12.1, 5.4.13, 5.4.14, 5.4.15, 5.12.2, 5.4.16, 5.12.3, 5.4.17, 5.12.4, 5.15.0, 5.4.18, 5.12.6, 5.4.19, 5.12.5, 5.15.1, 5.4.20, 5.12.7, 5.15.2, 5.15.3
• Component/s: None
• Labels:

  None

[JSDSERVER-15309] Information Disclosure in Jira Service Management Data Center and Server

prodsec-jac-bot made changes - 18/Jun/2024 5:00 PM

Resolution		New: Fixed [ 1 ]
Security	Original: Reporter and Atlassian Staff [ 10751 ]
Status	Original: Draft [ 12872 ]	New: Published [ 12873 ]

Kamil Kolonko made changes - 12/Jun/2024 12:46 PM

CVE ID

Original: CVE-2024-21683

New: CVE-2024-21685

Lee Berg made changes - 21/May/2024 5:11 PM

Security

New: Reporter and Atlassian Staff [ 10751 ]

Lee Berg made changes - 21/May/2024 5:11 PM

Resolution	Original: Fixed [ 1 ]
Status	Original: Published [ 12873 ]	New: Draft [ 12872 ]

prodsec-jac-bot made changes - 21/May/2024 5:00 PM

Resolution		New: Fixed [ 1 ]
Security	Original: Reporter and Atlassian Staff [ 10751 ]
Status	Original: Draft [ 12872 ]	New: Published [ 12873 ]

Lee Berg made changes - 20/May/2024 6:28 PM

Description

Original: This Information Disclosure vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to view sensitive information via an Information Disclosure vulnerability which has high impact to confidentiality, no impact to integrity, no impact to availability, and requires user interaction. Atlassian recommends that Jira Service Management Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:   *Data Center* ||*Affected versions*||*Fixed versions*|| |5.15.0 to 5.15.3|5.16.0 | |5.14.0 to 5.14.2|5.16.0| |5.13.0 to 5.13.2|5.16.0| |from 5.12.0 LTS to 5.12.7 LTS|5.16.0 or 5.12.8 LTS recommended| |from 5.11.0 to 5.11.3|5.16.0 or 5.12.8 LTS recommended| |from 5.10.0 to 5.10.2|5.16.0 or 5.12.8 LTS recommended| |from 5.9.0 to 5.9.2|5.16.0 or 5.12.8 LTS recommended| |from 5.8.0 to 5.8.2|5.16.0 or 5.12.8 LTS recommended| |from 5.7.0 to 5.7.2|5.16.0 or 5.12.8 LTS recommended| |from 5.6.0 to 5.6.2|5.16.0 or 5.12.8 LTS recommended| |from 5.5.0 to 5.5.1|5.16.0 or 5.12.8 LTS recommended| |from 5.4.0 LTS to 5.4.20 LTS|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.3.0 to 5.3.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.2.0 to 5.2.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.1.0 to 5.1.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |5.0|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 4.22 to 4.22.6|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |Any earlier versions|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS|   *Server* ||*Affected versions*||*Fixed versions*|| |from 5.12.0 LTS to 5.12.2 LTS|5.12.8 LTS recommended| |from 5.11.0 to 5.11.3|5.12.8 LTS recommended| |from 5.10.0 to 5.10.2|5.12.8 LTS recommended| |from 5.9.0 to 5.9.2|5.12.8 LTS recommended| |from 5.8.0 to 5.8.2|5.12.8 LTS recommended| |from 5.7.0 to 5.7.2|5.12.8 LTS recommended| |from 5.6.0 to 5.6.2|5.12.8 LTS recommended| |from 5.5.0 to 5.5.1|5.12.8 LTS recommended| |from 5.4.0 LTS to 5.4.20 LTS|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.3.0 to 5.3.1|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.2.0 to 5.2.1|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.1.0 to 5.1.1|5.12.8 LTS recommended or 5.4.21 LTS| |5.0|5.12.8 LTS recommended or 5.4.21 LTS| |from 4.22 to 4.22.6|5.12.8 LTS recommended or 5.4.21 LTS| |Any earlier versions|5.12.8 LTS recommended or 5.4.21 LTS|   See the release notes ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]). You can download the latest version of Jira Software Data Center and Server from the download center ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]) This vulnerability was found internally.

New: This Information Disclosure vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to view sensitive information via an Information Disclosure vulnerability which has high impact to confidentiality, no impact to integrity, no impact to availability, and requires user interaction. Atlassian recommends that Jira Service Management Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:   *Data Center* ||*Affected versions*||*Fixed versions*|| |5.15.0 to 5.15.3|5.16.0 | |5.14.0 to 5.14.2|5.16.0| |5.13.0 to 5.13.2|5.16.0| |from 5.12.0 LTS to 5.12.7 LTS|5.16.0 or 5.12.8 LTS recommended| |from 5.11.0 to 5.11.3|5.16.0 or 5.12.8 LTS recommended| |from 5.10.0 to 5.10.2|5.16.0 or 5.12.8 LTS recommended| |from 5.9.0 to 5.9.2|5.16.0 or 5.12.8 LTS recommended| |from 5.8.0 to 5.8.2|5.16.0 or 5.12.8 LTS recommended| |from 5.7.0 to 5.7.2|5.16.0 or 5.12.8 LTS recommended| |from 5.6.0 to 5.6.2|5.16.0 or 5.12.8 LTS recommended| |from 5.5.0 to 5.5.1|5.16.0 or 5.12.8 LTS recommended| |from 5.4.0 LTS to 5.4.20 LTS|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.3.0 to 5.3.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.2.0 to 5.2.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.1.0 to 5.1.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |5.0|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 4.22 to 4.22.6|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |Any earlier versions|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS|   *Server* ||*Affected versions*||*Fixed versions*|| |from 5.12.0 LTS to 5.12.7 LTS|5.12.8 LTS recommended| |from 5.11.0 to 5.11.3|5.12.8 LTS recommended| |from 5.10.0 to 5.10.2|5.12.8 LTS recommended| |from 5.9.0 to 5.9.2|5.12.8 LTS recommended| |from 5.8.0 to 5.8.2|5.12.8 LTS recommended| |from 5.7.0 to 5.7.2|5.12.8 LTS recommended| |from 5.6.0 to 5.6.2|5.12.8 LTS recommended| |from 5.5.0 to 5.5.1|5.12.8 LTS recommended| |from 5.4.0 LTS to 5.4.20 LTS|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.3.0 to 5.3.1|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.2.0 to 5.2.1|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.1.0 to 5.1.1|5.12.8 LTS recommended or 5.4.21 LTS| |5.0|5.12.8 LTS recommended or 5.4.21 LTS| |from 4.22 to 4.22.6|5.12.8 LTS recommended or 5.4.21 LTS| |Any earlier versions|5.12.8 LTS recommended or 5.4.21 LTS|   See the release notes ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]). You can download the latest version of Jira Software Data Center and Server from the download center ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]) This vulnerability was found internally.

Lee Berg made changes - 20/May/2024 6:24 PM

Description

Original: This Information Disclosure vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to view sensitive information via an Information Disclosure vulnerability which has high impact to confidentiality, no impact to integrity, no impact to availability, and requires user interaction. Atlassian recommends that Jira Service Management Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:   *Data Center* ||*Affected versions*||*Fixed versions*|| |5.15.0 to 5.15.3|5.16.0 | |5.12.0 to 5.12.7|5.16.0| |5.13.0|5.16.0| |from 5.12.0 LTS to 5.12.2 LTS|5.16.0 or 5.12.8 LTS recommended| |from 5.11.0 to 5.11.3|5.16.0 or 5.12.8 LTS recommended| |from 5.10.0 to 5.10.2|5.16.0 or 5.12.8 LTS recommended| |from 5.9.0 to 5.9.2|5.16.0 or 5.12.8 LTS recommended| |from 5.8.0 to 5.8.2|5.16.0 or 5.12.8 LTS recommended| |from 5.7.0 to 5.7.2|5.16.0 or 5.12.8 LTS recommended| |from 5.6.0 to 5.6.2|5.16.0 or 5.12.8 LTS recommended| |from 5.5.0 to 5.5.1|5.16.0 or 5.12.8 LTS recommended| |from 5.4.0 LTS to 5.4.20 LTS|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.3.0 to 5.3.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.2.0 to 5.2.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.1.0 to 5.1.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |5.0|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 4.22 to 4.22.6|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |Any earlier versions|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS|   *Server* ||*Affected versions*||*Fixed versions*|| |from 5.12.0 LTS to 5.12.2 LTS|5.12.8 LTS recommended| |from 5.11.0 to 5.11.3|5.12.8 LTS recommended| |from 5.10.0 to 5.10.2|5.12.8 LTS recommended| |from 5.9.0 to 5.9.2|5.12.8 LTS recommended| |from 5.8.0 to 5.8.2|5.12.8 LTS recommended| |from 5.7.0 to 5.7.2|5.12.8 LTS recommended| |from 5.6.0 to 5.6.2|5.12.8 LTS recommended| |from 5.5.0 to 5.5.1|5.12.8 LTS recommended| |from 5.4.0 LTS to 5.4.20 LTS|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.3.0 to 5.3.1|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.2.0 to 5.2.1|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.1.0 to 5.1.1|5.12.8 LTS recommended or 5.4.21 LTS| |5.0|5.12.8 LTS recommended or 5.4.21 LTS| |from 4.22 to 4.22.6|5.12.8 LTS recommended or 5.4.21 LTS| |Any earlier versions|5.12.8 LTS recommended or 5.4.21 LTS|   See the release notes ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]). You can download the latest version of Jira Software Data Center and Server from the download center ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]) This vulnerability was found internally.

New: This Information Disclosure vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to view sensitive information via an Information Disclosure vulnerability which has high impact to confidentiality, no impact to integrity, no impact to availability, and requires user interaction. Atlassian recommends that Jira Service Management Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:   *Data Center* ||*Affected versions*||*Fixed versions*|| |5.15.0 to 5.15.3|5.16.0 | |5.14.0 to 5.14.2|5.16.0| |5.13.0 to 5.13.2|5.16.0| |from 5.12.0 LTS to 5.12.7 LTS|5.16.0 or 5.12.8 LTS recommended| |from 5.11.0 to 5.11.3|5.16.0 or 5.12.8 LTS recommended| |from 5.10.0 to 5.10.2|5.16.0 or 5.12.8 LTS recommended| |from 5.9.0 to 5.9.2|5.16.0 or 5.12.8 LTS recommended| |from 5.8.0 to 5.8.2|5.16.0 or 5.12.8 LTS recommended| |from 5.7.0 to 5.7.2|5.16.0 or 5.12.8 LTS recommended| |from 5.6.0 to 5.6.2|5.16.0 or 5.12.8 LTS recommended| |from 5.5.0 to 5.5.1|5.16.0 or 5.12.8 LTS recommended| |from 5.4.0 LTS to 5.4.20 LTS|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.3.0 to 5.3.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.2.0 to 5.2.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.1.0 to 5.1.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |5.0|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 4.22 to 4.22.6|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |Any earlier versions|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS|   *Server* ||*Affected versions*||*Fixed versions*|| |from 5.12.0 LTS to 5.12.2 LTS|5.12.8 LTS recommended| |from 5.11.0 to 5.11.3|5.12.8 LTS recommended| |from 5.10.0 to 5.10.2|5.12.8 LTS recommended| |from 5.9.0 to 5.9.2|5.12.8 LTS recommended| |from 5.8.0 to 5.8.2|5.12.8 LTS recommended| |from 5.7.0 to 5.7.2|5.12.8 LTS recommended| |from 5.6.0 to 5.6.2|5.12.8 LTS recommended| |from 5.5.0 to 5.5.1|5.12.8 LTS recommended| |from 5.4.0 LTS to 5.4.20 LTS|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.3.0 to 5.3.1|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.2.0 to 5.2.1|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.1.0 to 5.1.1|5.12.8 LTS recommended or 5.4.21 LTS| |5.0|5.12.8 LTS recommended or 5.4.21 LTS| |from 4.22 to 4.22.6|5.12.8 LTS recommended or 5.4.21 LTS| |Any earlier versions|5.12.8 LTS recommended or 5.4.21 LTS|   See the release notes ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]). You can download the latest version of Jira Software Data Center and Server from the download center ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]) This vulnerability was found internally.

Lee Berg made changes - 20/May/2024 6:19 PM

Description

Original: This Information Disclosure vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to view sensitive information via an Information Disclosure vulnerability which has high impact to confidentiality, no impact to integrity, no impact to availability, and requires user interaction. Atlassian recommends that Jira Service Management Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:   ||*Affected versions*||*Fixed versions*|| |5.13.0|5.14.0 recommended or 5.13.1| |from 5.12.0 LTS to 5.12.2 LTS|5.14.0 recommended or 5.12.3 LTS or 5.12.4 LTS| |from 5.11.0 to 5.11.3|5.14.0 recommended or 5.12.4 LTS| |from 5.10.0 to 5.10.2|5.14.0 recommended or 5.12.4 LTS| |from 5.9.0 to 5.9.2|5.14.0 recommended or 5.12.4 LTS| |from 5.8.0 to 5.8.2|5.14.0 recommended or 5.12.4 LTS| |from 5.7.0 to 5.7.2|5.14.0 recommended or 5.12.4 LTS| |from 5.6.0 to 5.6.2|5.14.0 recommended or 5.12.4 LTS| |from 5.5.0 to 5.5.1|5.14.0 recommended or 5.12.4 LTS| |from 5.4.0 LTS to 5.4.15 LTS|5.14.0 recommended or 5.12.4 LTS or 5.4.16 LTS or 5.4.17 LTS| |from 5.3.0 to 5.3.1|5.14.0 recommended or 5.12.4 LTS or 5.4.17 LTS| |from 5.2.0 to 5.2.1|5.14.0 recommended or 5.12.4 LTS or 5.4.17 LTS| |from 5.1.0 to 5.1.1|5.14.0 recommended or 5.12.4 LTS or 5.4.17 LTS| |5.0|5.14.0 recommended or 5.12.4 LTS or 5.4.17 LTS| |from 4.22 to 4.22.6|5.14.0 recommended or 5.12.4 LTS or 5.4.17 LTS| |Any earlier versions|5.14.0 recommended or 5.12.4 LTS or 5.4.17 LTS|   See the release notes ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]). You can download the latest version of Jira Software Data Center and Server from the download center ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]) This vulnerability was found internally.

New: This Information Disclosure vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to view sensitive information via an Information Disclosure vulnerability which has high impact to confidentiality, no impact to integrity, no impact to availability, and requires user interaction. Atlassian recommends that Jira Service Management Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:   *Data Center* ||*Affected versions*||*Fixed versions*|| |5.15.0 to 5.15.3|5.16.0 | |5.12.0 to 5.12.7|5.16.0| |5.13.0|5.16.0| |from 5.12.0 LTS to 5.12.2 LTS|5.16.0 or 5.12.8 LTS recommended| |from 5.11.0 to 5.11.3|5.16.0 or 5.12.8 LTS recommended| |from 5.10.0 to 5.10.2|5.16.0 or 5.12.8 LTS recommended| |from 5.9.0 to 5.9.2|5.16.0 or 5.12.8 LTS recommended| |from 5.8.0 to 5.8.2|5.16.0 or 5.12.8 LTS recommended| |from 5.7.0 to 5.7.2|5.16.0 or 5.12.8 LTS recommended| |from 5.6.0 to 5.6.2|5.16.0 or 5.12.8 LTS recommended| |from 5.5.0 to 5.5.1|5.16.0 or 5.12.8 LTS recommended| |from 5.4.0 LTS to 5.4.20 LTS|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.3.0 to 5.3.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.2.0 to 5.2.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 5.1.0 to 5.1.1|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |5.0|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |from 4.22 to 4.22.6|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS| |Any earlier versions|5.16.0 or 5.12.8 LTS recommended or 5.4.21 LTS|   *Server* ||*Affected versions*||*Fixed versions*|| |from 5.12.0 LTS to 5.12.2 LTS|5.12.8 LTS recommended| |from 5.11.0 to 5.11.3|5.12.8 LTS recommended| |from 5.10.0 to 5.10.2|5.12.8 LTS recommended| |from 5.9.0 to 5.9.2|5.12.8 LTS recommended| |from 5.8.0 to 5.8.2|5.12.8 LTS recommended| |from 5.7.0 to 5.7.2|5.12.8 LTS recommended| |from 5.6.0 to 5.6.2|5.12.8 LTS recommended| |from 5.5.0 to 5.5.1|5.12.8 LTS recommended| |from 5.4.0 LTS to 5.4.20 LTS|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.3.0 to 5.3.1|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.2.0 to 5.2.1|5.12.8 LTS recommended or 5.4.21 LTS| |from 5.1.0 to 5.1.1|5.12.8 LTS recommended or 5.4.21 LTS| |5.0|5.12.8 LTS recommended or 5.4.21 LTS| |from 4.22 to 4.22.6|5.12.8 LTS recommended or 5.4.21 LTS| |Any earlier versions|5.12.8 LTS recommended or 5.4.21 LTS|   See the release notes ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]). You can download the latest version of Jira Software Data Center and Server from the download center ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]) This vulnerability was found internally.

Lee Berg made changes - 20/May/2024 6:13 PM

Description

Original: This Information Disclosure vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to view sensitive information via an Information Disclosure vulnerability which has high impact to confidentiality, no impact to integrity, no impact to availability, and requires user interaction. Atlassian recommends that Jira Service Management Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:  * Versions Go Here See the release notes ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]). You can download the latest version of Jira Software Data Center and Server from the download center ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]) This vulnerability was found internally.

New: This Information Disclosure vulnerability, with a CVSS Score of 7.4, allows an unauthenticated attacker to view sensitive information via an Information Disclosure vulnerability which has high impact to confidentiality, no impact to integrity, no impact to availability, and requires user interaction. Atlassian recommends that Jira Service Management Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:   ||*Affected versions*||*Fixed versions*|| |5.13.0|5.14.0 recommended or 5.13.1| |from 5.12.0 LTS to 5.12.2 LTS|5.14.0 recommended or 5.12.3 LTS or 5.12.4 LTS| |from 5.11.0 to 5.11.3|5.14.0 recommended or 5.12.4 LTS| |from 5.10.0 to 5.10.2|5.14.0 recommended or 5.12.4 LTS| |from 5.9.0 to 5.9.2|5.14.0 recommended or 5.12.4 LTS| |from 5.8.0 to 5.8.2|5.14.0 recommended or 5.12.4 LTS| |from 5.7.0 to 5.7.2|5.14.0 recommended or 5.12.4 LTS| |from 5.6.0 to 5.6.2|5.14.0 recommended or 5.12.4 LTS| |from 5.5.0 to 5.5.1|5.14.0 recommended or 5.12.4 LTS| |from 5.4.0 LTS to 5.4.15 LTS|5.14.0 recommended or 5.12.4 LTS or 5.4.16 LTS or 5.4.17 LTS| |from 5.3.0 to 5.3.1|5.14.0 recommended or 5.12.4 LTS or 5.4.17 LTS| |from 5.2.0 to 5.2.1|5.14.0 recommended or 5.12.4 LTS or 5.4.17 LTS| |from 5.1.0 to 5.1.1|5.14.0 recommended or 5.12.4 LTS or 5.4.17 LTS| |5.0|5.14.0 recommended or 5.12.4 LTS or 5.4.17 LTS| |from 4.22 to 4.22.6|5.14.0 recommended or 5.12.4 LTS or 5.4.17 LTS| |Any earlier versions|5.14.0 recommended or 5.12.4 LTS or 5.4.17 LTS|   See the release notes ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]). You can download the latest version of Jira Software Data Center and Server from the download center ([http://www.atlassian.com/software/jira/service-management/download-archives|https://www.atlassian.com/software/jira/service-management/download-archives]) This vulnerability was found internally.

Yann made changes - 15/May/2024 10:11 AM

Affects Version/s		New: 5.15.3 [ 107818 ]
Affects Version/s		New: 5.15.0 [ 107090 ]
Affects Version/s		New: 5.15.1 [ 107621 ]
Affects Version/s		New: 5.15.2 [ 108100 ]

Load more older history items