CVE-2020-14167

The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to impact the application's availability via an Denial of Service (DoS) vulnerability.

Published: Jul 1, 2020
Updated: Apr 13, 2023
CVE: CVE-2020-14167
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.5
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:N/I:N/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
atlassian / jira	-	7.13.14
atlassian / jira_software_data_center	-	7.13.14
atlassian / jira_server	8.5.0	8.5.5
atlassian / jira_server	8.8.0	8.8.2
atlassian / jira_server	8.9.0	8.9.1
atlassian / jira_data_center	8.5.0	8.5.5
atlassian / jira_data_center	8.8.0	8.8.2
atlassian / jira_data_center	8.9.0	8.9.1

https://jira.atlassian.com/browse/JRASERVER-71197

Vulnerability Database

289,784

CVE-2020-14167