Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL hijacking vulnerability in Tomcat. The affected versions are before version 8.5.5, and from version 8.6.0 before 8.7.2.
| Software | From | Fixed in |
|---|---|---|
| atlassian / jira_server | 8.6.0 | 8.7.2 |
| atlassian / jira_data_center | 8.6.0 | 8.7.2 |
| atlassian / jira_server | - | 8.5.5 |
| atlassian / jira_data_center | - | 8.5.5 |