A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Jira Core Server
Vendor
Atlassian
Product
Jira Core Server
Platforms
Unknown
Default status
Unknown
Jira Core Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
8.13.18
Unavailable
None listed
8.14.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.20.6
Unavailable
None listed
8.21.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.22.0
Unavailable
None listed
Jira Software Server
Vendor
Atlassian
Product
Jira Software Server
Platforms
Unknown
Default status
Unknown
Jira Software Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
8.13.18
Unavailable
None listed
8.14.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.20.6
Unavailable
None listed
8.21.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.22.0
Unavailable
None listed
Jira Software Data Center
Vendor
Atlassian
Product
Jira Software Data Center
Platforms
Unknown
Default status
Unknown
Jira Software Data Center · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
8.13.18
Unavailable
None listed
8.14.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.20.6
Unavailable
None listed
8.21.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.22.0
Unavailable
None listed
Jira Service Management Server
Vendor
Atlassian
Product
Jira Service Management Server
Platforms
Unknown
Default status
Unknown
Jira Service Management Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
unspecified
affected
custom
4.13.18
Unavailable
None listed
4.14.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
4.20.6
Unavailable
None listed
4.21.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
4.22.0
Unavailable
None listed
Jira Service Management Data Center
Vendor
Atlassian
Product
Jira Service Management Data Center
Platforms
Unknown
Default status
Unknown
Jira Service Management Data Center · Scoped product and version facts