CVEvulnerability

CVE-2018-5231

7.5 HIGH Published 2018-05-16 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2018-05-16
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P

Description

The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4 and from version 7.9.0 before version 7.9.2 allows remote attackers to perform a denial of service attack via sending requests to it.

Affected configurations

• atlassian jira (< 7.6.6) • atlassian jira server (>= 7.7.0 < 7.7.4) • atlassian jira server (>= 7.8.0 < 7.8.4) • atlassian jira server (>= 7.9.0 < 7.9.2)

References