Lucene search
3645502bbf60JRASERVER-78034HistorySep 03, 2024 - 4:06 p.m.
org.springframework:spring-web used by Jira 9 contains vulnerabilities
2024-09-0316:06:06
3645502bbf60
jira.atlassian.com
73
jira 9
org.springframework
spring-web
vulnerabilities
cve-2024-38808
atlassian.
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
AI Score
6.7
Confidence
Low
Jira 9 and possibly the upcoming Jira 10 are affected by CVE-2024-38808.
https://spring.io/security/cve-2024-38808
https://asecurityteam.atlassian.net/browse/VULN-1409329
Affected configurations
Node
atlassianjira_data_centerRange≤9.17.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| atlassian | jira_data_center | * | cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:* |
Related
osv
osv
CGA-7r36-mwcw-5r62
2024-08-23 10:04:54
CGA-439m-2c4m-j5r4
2024-08-30 17:20:04
CVE-2024-38808
2024-08-20 08:15:05
github
github
Spring Framework vulnerable to Denial of Service
2024-08-20 09:30:28
wolfi
wolfi
CVE-2024-38808 vulnerabilities
2024-09-19 21:18:36
cvelist
cvelist
CVE-2024-38808 CVE-2024-38808: Spring Expression DoS Vulnerability
2024-08-20 07:12:44
debiancve
debiancve
CVE-2024-38808
2024-08-20 08:15:05
nvd
nvd
CVE-2024-38808
2024-08-20 08:15:05
veracode
veracode
Denial Of Service (DoS)
2024-08-21 05:47:27
vulnrichment
vulnrichment
CVE-2024-38808 CVE-2024-38808: Spring Expression DoS Vulnerability
2024-08-20 07:12:44
nessus
nessus
Spring Framework < 5.3.39 Spring Expression DoS (CVE-2024-38808)
2024-08-23 00:00:00
redhatcve
redhatcve
CVE-2024-38808
2024-08-20 18:10:02
cve
cve
CVE-2024-38808
2024-08-20 08:15:05
openvas
openvas
VMware Spring Framework < 5.3.39 Spring Expression DoS Vulnerability - Linux
2024-08-15 00:00:00
redhat
redhat
spring
spring
This Week in Spring - August 20th, 2024
2024-08-20 00:00:00
CVSS3
4.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
AI Score
6.7
Confidence
Low
Related for JRASERVER-78034