Uploaded image for project: 'Jira Software Data Center'
  1. Jira Software Data Center
  2. JSWSERVER-20111

Denial of service in issue searching through Epic Name ordering - CVE-2019-11583

XMLWordPrintable

      The issue searching component in Jira before version 8.1.0 allows remote attackers to
      deny access to Jira service via denial of service vulnerability in issue search when ordering by "Epic Name".

            [JSWSERVER-20111] Denial of service in issue searching through Epic Name ordering - CVE-2019-11583

            set-jac-bot made changes -
            Fixed in Enterprise Release/s New: [Download 7.13|https://confluence.atlassian.com/enterprise/atlassian-enterprise-releases-948227420.html]
            Said made changes -
            Labels Original: CVE-2019-11583 advisory advisory-released cvss-medium denial-of-service pse-request security New: CVE-2019-11583 advisory advisory-released application-dos cvss-medium denial-of-service pse-request security
            Robbie (Inactive) made changes -
            Fix Version/s New: 7.13.4 [ 86493 ]
            Clement made changes -
            Remote Link New: This issue links to "Page (Confluence)" [ 442441 ]
            David Black made changes -
            Description Original: obfuscated description New: obfuscated description
            David Black made changes -
            Description Original: obfuscated description New: obfuscated description
            David Black made changes -
            Security Original: Atlassian Staff [ 10750 ]
            David Black made changes -
            Labels Original: CVE-2019-11583 advisory advisory-to-release cvss-medium denial-of-service pse-request security New: CVE-2019-11583 advisory advisory-released cvss-medium denial-of-service pse-request security
            David Black made changes -
            Labels Original: advisory advisory-to-release cvss-medium denial-of-service pse-request security New: CVE-2019-11583 advisory advisory-to-release cvss-medium denial-of-service pse-request security
            David Black made changes -
            Summary Original: Denial of service in issue searching through Epic Name ordering - New: Denial of service in issue searching through Epic Name ordering - CVE-2019-11583

              Unassigned Unassigned
              security-metrics-bot Security Metrics Bot
              Affected customers:
              0 This affects my team
              Watchers:
              13 Start watching this issue

                Created:
                Updated:
                Resolved: