Description
Atlassian Jira Server and Data Center contain a path traversal vulnerability that allows a remote attacker to read particular files in the /WEB-INF/web.xml endpoint.
Full record on cve.org →Affected packages
| Package | Vendor / Product | Version range | Status |
|---|---|---|---|
| jira_data_center | atlassian / jira_data_center | >= 0, < 8.5.14 | affected |
| jira_data_center | atlassian / jira_data_center | >= 0, < 8.5.14 | affected |
| jira_data_center | atlassian / jira_data_center | >= 0, < 8.5.14 | affected |
| jira_data_center | atlassian / jira_data_center | >= 8.14.0, < 8.16.1 | affected |
| jira_data_center | atlassian / jira_data_center | >= 8.14.0, < 8.16.1 | affected |
| jira_data_center | atlassian / jira_data_center | >= 8.14.0, < 8.16.1 | affected |
| jira_data_center | atlassian / jira_data_center | >= 8.6.0, < 8.13.6 | affected |
| jira_data_center | atlassian / jira_data_center | >= 8.6.0, < 8.13.6 | affected |
| jira_data_center | atlassian / jira_data_center | >= 8.6.0, < 8.13.6 | affected |
| Jira Data Center | Atlassian / Jira Data Center | >= 8.14.0, < unspecified | affected |
| Jira Data Center | Atlassian / Jira Data Center | >= 8.6.0, < unspecified | affected |
| Jira Data Center | Atlassian / Jira Data Center | >= unspecified, < 8.16.1 | affected |
| Jira Data Center | Atlassian / Jira Data Center | >= unspecified, < 8.5.14 | affected |
| Jira Data Center | Atlassian / Jira Data Center | >= unspecified, < 8.13.6 | affected |
| jira_server | atlassian / jira_server | >= 0, < 8.5.14 | affected |
| jira_server | atlassian / jira_server | >= 0, < 8.5.14 | affected |
| jira_server | atlassian / jira_server | >= 0, < 8.5.14 | affected |
| jira_server | atlassian / jira_server | >= 8.14.0, < 8.16.1 | affected |
| jira_server | atlassian / jira_server | >= 8.14.0, < 8.16.1 | affected |
| jira_server | atlassian / jira_server | >= 8.14.0, < 8.16.1 | affected |
| jira_server | atlassian / jira_server | >= 8.6.0, < 8.13.6 | affected |
| jira_server | atlassian / jira_server | >= 8.6.0, < 8.13.6 | affected |
| jira_server | atlassian / jira_server | >= 8.6.0, < 8.13.6 | affected |
| Jira Server | Atlassian / Jira Server | >= 8.14.0, < unspecified | affected |
| Jira Server | Atlassian / Jira Server | >= 8.6.0, < unspecified | affected |
| Jira Server | Atlassian / Jira Server | >= unspecified, < 8.5.14 | affected |
| Jira Server | Atlassian / Jira Server | >= unspecified, < 8.16.1 | affected |
| Jira Server | Atlassian / Jira Server | >= unspecified, < 8.13.6 | affected |