CVE-2017-5983 in JIRA Server

Tóm tắt

Bởi MITRE

The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Đặt trước: 13/02/2017
• Tiết lộ: 10/04/2017
• Kiểm duyệt: được chấp nhận
• mục: VDB-99550
• CPE: sẵn sàng
• CWE: CWE-502 (Đã xác nhận)
• CVSS: 9.8 (NVD)
• EPSS: 0.16239
• KEV: không
• Các hoạt động: rất thấp
• ngành: Finance, Telecommunication, ...

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-5983
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-5983
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-5983/