4
CVSSv2

CVE-2019-20897

Published: 13/07/2020 Updated: 30/03/2022
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

Vulnerability Summary

The avatar upload feature in affected versions of Atlassian Jira Server and Data Center allows remote malicious users to achieve Denial of Service via a crafted PNG file. The affected versions are before version 8.5.4, from version 8.6.0 prior to 8.6.2, and from version 8.7.0 prior to 8.7.1.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

atlassian jira

atlassian jira server

atlassian jira software data center

atlassian jira data center