CVE-2019-20418
Last modified
CVE-2019-20418 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the instance via an Application Denial of Service vulnerability in the /rendering/wiki endpoint. The affected versions are before version 8.8.0.. EPSS estimates a 1.02% chance of exploitation in the next 30 days.
Description
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the instance via an Application Denial of Service vulnerability in the /rendering/wiki endpoint. The affected versions are before version 8.8.0.
Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Atlassian | Jira | < 8.8.0 |
| Atlassian | Jira Software Data Center | < 8.8.0 |
References
- https://jira.atlassian.com/browse/JRASERVER-70943Issue Tracking, Vendor Advisory
- https://jira.atlassian.com/browse/JRASERVER-70943Issue Tracking, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-20418?
How severe is CVE-2019-20418?
How do I fix CVE-2019-20418?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-20412The Convert Sub-Task to Issue page in affected versions of A…5.3
- CVE-2019-20413Affected versions of Atlassian Jira Server and Data Center a…7.5
- CVE-2019-20414Affected versions of Atlassian Jira Server and Data Center a…5.4
- CVE-2019-20415Atlassian Jira Server and Data Center in affected versions a…4.3
- CVE-2019-20416Affected versions of Atlassian Jira Server and Data Center a…4.8
- CVE-2019-20417Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2019-20419Affected versions of Atlassian Jira Server and Data Center a…7.8
- CVE-2019-20421In Jp2Image::readMetadata() in jp2image.cpp in Exiv2 0.27.2,…7.5
- CVE-2019-20422In the Linux kernel before 5.3.4, fib6_rule_lookup in net/ip…5.5
- CVE-2019-20423In the Lustre file system before 2.12.3, the ptlrpc module h…7.5
- CVE-2019-20424In the Lustre file system before 2.12.3, mdt_object_remote i…7.5
- CVE-2019-20425In the Lustre file system before 2.12.3, the ptlrpc module h…7.5
Are you affected by CVE-2019-20418?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST