A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read server-side request forgery via a batch endpoint. This affects Atlassian Jira Server and Data Center from version 8.0.0 before version 8.13.22, from version 8.14.0 before 8.20.10, from version 8.21.0 before 8.22.4. This also affects Jira Management Server and Data Center versions from version 4.0.0 before 4.13.22, from version 4.14.0 before 4.20.10 and from version 4.21.0 before 4.22.4.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Jira Core Server
Vendor
Atlassian
Product
Jira Core Server
Platforms
Unknown
Default status
Unknown
Jira Core Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.0.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.13.22
Unavailable
None listed
8.14.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.20.10
Unavailable
None listed
8.21.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.22.4
Unavailable
None listed
Jira Software Server
Vendor
Atlassian
Product
Jira Software Server
Platforms
Unknown
Default status
Unknown
Jira Software Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.0.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.13.22
Unavailable
None listed
8.14.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.20.10
Unavailable
None listed
8.21.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.22.4
Unavailable
None listed
Jira Software Data Center
Vendor
Atlassian
Product
Jira Software Data Center
Platforms
Unknown
Default status
Unknown
Jira Software Data Center · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
8.0.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.13.22
Unavailable
None listed
8.14.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.20.10
Unavailable
None listed
8.21.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
8.22.4
Unavailable
None listed
Jira Service Management Server
Vendor
Atlassian
Product
Jira Service Management Server
Platforms
Unknown
Default status
Unknown
Jira Service Management Server · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
4.0.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
4.13.22
Unavailable
None listed
4.14.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
4.20.10
Unavailable
None listed
4.21.0
affected
custom
unspecified
Unavailable
None listed
unspecified
affected
custom
4.22.4
Unavailable
None listed
Jira Service Management Data Center
Vendor
Atlassian
Product
Jira Service Management Data Center
Platforms
Unknown
Default status
Unknown
Jira Service Management Data Center · Scoped product and version facts