[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250039

 
 

909

 
 

195882

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Code injection vulnerability in Atlassian Jira Server - CVE-2022-36799 (linux)

ID: oval:org.secpod.oval:def:91102Date: (C)2023-07-19   (M)2023-07-19
Class: VULNERABILITYFamily: unix




The host is installed with Atlassian Jira Server before 8.13.19, 8.14.0 before 8.20.7, or 8.21.0 before 8.22.1 and is prone to a code injection vulnerability. A flaw is present in the application which fails to properly handle the Email Templates feature. Successful exploitation could allows a remote attacker with system administrator permissions to execute arbitrary code via Template Injection leading to Remote Code Execution (RCE).

Platform:
Linux
Product:
Atlassian Jira Server
Reference:
CVE-2022-36799
CVE    1
CVE-2022-36799

© SecPod Technologies