Description
The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4 and from version 7.9.0 before version 7.9.2 allows remote attackers to perform a denial of service attack via sending requests to it.
References (2)
Core 2
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/104205
Vendor Advisory x_refsource_confirm
https://jira.atlassian.com/browse/JRASERVER-67290
Scores
CVSS v3
7.5
EPSS
0.0098
EPSS Percentile
77.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (2)
atlassian/jira
< 7.6.6
atlassian/jira_server
7.7.0 - 7.7.4
Published
May 16, 2018
Tracked Since
Feb 18, 2026