CVE-2018-5231: High severity atlassian jira vulnerability
The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4 and from version 7.9.0 before version 7.9.2 allows remote attackers to perform a denial of service attack via sending requests to it.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-5231?
CVE-2018-5231 is rated as a Medium severity vulnerability due to its potential for causing denial of service.
How do I fix CVE-2018-5231?
To fix CVE-2018-5231, upgrade your Atlassian Jira to version 7.6.6 or later, or to the latest version in the 7.7.x, 7.8.x, or 7.9.x series.
Who is affected by CVE-2018-5231?
CVE-2018-5231 affects Atlassian Jira versions prior to 7.6.6 and versions from 7.7.0 to before 7.7.4, from 7.8.0 to before 7.8.4, and from 7.9.0 to before 7.9.2.
What type of attack can be performed using CVE-2018-5231?
CVE-2018-5231 allows remote attackers to perform a denial of service attack by sending specially crafted requests.
Is there a workaround for CVE-2018-5231 if I cannot upgrade?
Currently, there are no publicly documented workarounds for CVE-2018-5231, and upgrading is the recommended mitigation.