CVE-2022-26136 - Vulnerability Details

A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The impact depends on which filters are used by each app, and how the filters are used. This vulnerability can result in authentication bypass and cross-site scripting. Atlassian has released updates that fix the root cause of this vulnerability, but has not exhaustively enumerated all potential consequences of this vulnerability. Atlassian Bamboo versions are affected before 8.0.9, from 8.1.0 before 8.1.8, and from 8.2.0 before 8.2.4. Atlassian Bitbucket versions are affected before 7.6.16, from 7.7.0 before 7.17.8, from 7.18.0 before 7.19.5, from 7.20.0 before 7.20.2, from 7.21.0 before 7.21.2, and versions 8.0.0 and 8.1.0. Atlassian Confluence versions are affected before 7.4.17, from 7.5.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and version 7.21.0. Atlassian Crowd versions are affected before 4.3.8, from 4.4.0 before 4.4.2, and version 5.0.0. Atlassian Fisheye and Crucible versions before 4.8.10 are affected. Atlassian Jira versions are affected before 8.13.22, from 8.14.0 before 8.20.10, and from 8.21.0 before 8.22.4. Atlassian Jira Service Management versions are affected before 4.13.22, from 4.14.0 before 4.20.10, and from 4.21.0 before 4.22.4.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact total

Vendors	Products
Atlassian	Bamboo Bitbucket Confluence Data Center Confluence Server Crowd Crucible Fisheye Jira Data Center Jira Server Jira Service Desk Jira Service Management

Configuration 1 [-]

OR	cpe:2.3:a:atlassian:bamboo::::::::
	cpe:2.3:a:atlassian:bamboo::::::::
	cpe:2.3:a:atlassian:bamboo::::::::
	cpe:2.3:a:atlassian:bamboo::::::::
	cpe:2.3:a:atlassian:bitbucket::::::::
	cpe:2.3:a:atlassian:bitbucket::::::::
	cpe:2.3:a:atlassian:bitbucket::::::::
	cpe:2.3:a:atlassian:bitbucket::::::::
	cpe:2.3:a:atlassian:bitbucket::::::::
	cpe:2.3:a:atlassian:bitbucket:8.0.0:::::::*
	cpe:2.3:a:atlassian:bitbucket:8.1.0:::::::*
	cpe:2.3:a:atlassian:confluence_data_center::::::::
	cpe:2.3:a:atlassian:confluence_data_center::::::::
	cpe:2.3:a:atlassian:confluence_data_center::::::::
	cpe:2.3:a:atlassian:confluence_data_center::::::::
	cpe:2.3:a:atlassian:confluence_data_center::::::::
	cpe:2.3:a:atlassian:confluence_data_center::::::::
	cpe:2.3:a:atlassian:confluence_data_center:7.18.0:::::::*
	cpe:2.3:a:atlassian:confluence_server::::::::
	cpe:2.3:a:atlassian:confluence_server::::::::
	cpe:2.3:a:atlassian:confluence_server::::::::
	cpe:2.3:a:atlassian:confluence_server::::::::
	cpe:2.3:a:atlassian:confluence_server::::::::
	cpe:2.3:a:atlassian:confluence_server::::::::
	cpe:2.3:a:atlassian:confluence_server:7.18.0:::::::*
	cpe:2.3:a:atlassian:crowd::::::::
	cpe:2.3:a:atlassian:crowd::::::::
	cpe:2.3:a:atlassian:crowd:5.0.0:::::::*
	cpe:2.3:a:atlassian:crucible::::::::
	cpe:2.3:a:atlassian:fisheye::::::::
	cpe:2.3:a:atlassian:jira_data_center::::::::
	cpe:2.3:a:atlassian:jira_data_center::::::::
	cpe:2.3:a:atlassian:jira_data_center::::::::
	cpe:2.3:a:atlassian:jira_server::::::::
	cpe:2.3:a:atlassian:jira_server::::::::
	cpe:2.3:a:atlassian:jira_server::::::::
	cpe:2.3:a:atlassian:jira_service_desk:::::data_center:::*
	cpe:2.3:a:atlassian:jira_service_desk:::::server:::*
	cpe:2.3:a:atlassian:jira_service_management:::::data_center:::*
	cpe:2.3:a:atlassian:jira_service_management:::::server:::*
	cpe:2.3:a:atlassian:jira_service_management:::::data_center:::*
	cpe:2.3:a:atlassian:jira_service_management:::::server:::*

No data.

References

Link	Providers
https://jira.atlassian.com/browse/BAM-21795
https://jira.atlassian.com/browse/BSERV-13370
https://jira.atlassian.com/browse/CONFSERVER-79476
https://jira.atlassian.com/browse/CRUC-8541
https://jira.atlassian.com/browse/CWD-5815
https://jira.atlassian.com/browse/FE-7410
https://jira.atlassian.com/browse/JRASERVER-73897
https://jira.atlassian.com/browse/JSDSERVER-11863

History

Thu, 03 Oct 2024 17:30:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:a:atlassian:jira_service_desk:-::::data_center::: cpe:2.3:a:atlassian:jira_service_desk:-::::server:::
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: atlassian

Published: 2022-07-20T17:25:18.803466Z

Updated: 2024-10-03T16:43:16.268Z

Reserved: 2022-02-25T00:00:00

Link: CVE-2022-26136

Vulnrichment

Updated: 2024-08-03T04:56:37.592Z

NVD

Status : Modified

Published: 2022-07-20T18:15:08.487

Modified: 2024-11-21T06:53:30.297

Link: CVE-2022-26136

Redhat

No data.

Show plain JSON

{"containers": {"cna": {"affected": [{"product": "Bamboo Server", "vendor": "Atlassian", "versions": [{"lessThan": "8.0.9", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "8.1.0", "versionType": "custom"}, {"lessThan": "8.1.8", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "8.2.0", "versionType": "custom"}, {"lessThan": "8.2.4", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Bamboo Data Center", "vendor": "Atlassian", "versions": [{"lessThan": "8.0.9", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "8.1.0", "versionType": "custom"}, {"lessThan": "8.1.8", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "8.2.0", "versionType": "custom"}, {"lessThan": "8.2.4", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Bitbucket Server", "vendor": "Atlassian", "versions": [{"lessThan": "7.6.16", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.7.0", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.16.0", "versionType": "custom"}, {"lessThan": "7.17.8", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.18.0", "versionType": "custom"}, {"lessThan": "7.19.5", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.20.0", "versionType": "custom"}, {"lessThan": "7.20.2", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.21.0", "versionType": "custom"}, {"lessThan": "7.21.2", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "8.0.0"}, {"status": "affected", "version": "8.1.0"}]}, {"product": "Bitbucket Data Center", "vendor": "Atlassian", "versions": [{"lessThan": "7.6.16", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.7.0", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.16.0", "versionType": "custom"}, {"lessThan": "7.17.8", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.18.0", "versionType": "custom"}, {"lessThan": "7.19.5", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.20.0", "versionType": "custom"}, {"lessThan": "7.20.2", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.21.0", "versionType": "custom"}, {"lessThan": "7.21.2", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "8.0.0"}, {"status": "affected", "version": "8.1.0"}]}, {"product": "Confluence Server", "vendor": "Atlassian", "versions": [{"lessThan": "7.4.17", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.5.0", "versionType": "custom"}, {"lessThan": "7.13.7", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.14.0", "versionType": "custom"}, {"lessThan": "7.14.3", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.15.0", "versionType": "custom"}, {"lessThan": "7.15.2", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.16.0", "versionType": "custom"}, {"lessThan": "7.16.4", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.17.0", "versionType": "custom"}, {"lessThan": "7.17.4", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "7.18.0"}]}, {"product": "Confluence Data Center", "vendor": "Atlassian", "versions": [{"lessThan": "7.4.17", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.5.0", "versionType": "custom"}, {"lessThan": "7.13.7", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.14.0", "versionType": "custom"}, {"lessThan": "7.14.3", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.15.0", "versionType": "custom"}, {"lessThan": "7.15.2", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.16.0", "versionType": "custom"}, {"lessThan": "7.16.4", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "7.17.0", "versionType": "custom"}, {"lessThan": "7.17.4", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "7.18.0"}]}, {"product": "Crowd Server", "vendor": "Atlassian", "versions": [{"lessThan": "4.3.8", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "4.4.0", "versionType": "custom"}, {"lessThan": "4.4.2", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "5.0.0"}]}, {"product": "Crowd Data Center", "vendor": "Atlassian", "versions": [{"lessThan": "4.3.8", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "4.4.0", "versionType": "custom"}, {"lessThan": "4.4.2", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "5.0.0"}]}, {"product": "Crucible", "vendor": "Atlassian", "versions": [{"lessThan": "4.8.10", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Fisheye", "vendor": "Atlassian", "versions": [{"lessThan": "4.8.10", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Jira Core Server", "vendor": "Atlassian", "versions": [{"lessThan": "8.13.22", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "8.14.0", "versionType": "custom"}, {"lessThan": "8.20.10", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "8.21.0", "versionType": "custom"}, {"lessThan": "8.22.4", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Jira Software Server", "vendor": "Atlassian", "versions": [{"lessThan": "8.13.22", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "8.14.0", "versionType": "custom"}, {"lessThan": "8.20.10", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "8.21.0", "versionType": "custom"}, {"lessThan": "8.22.4", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Jira Software Data Center", "vendor": "Atlassian", "versions": [{"lessThan": "8.13.22", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "8.14.0", "versionType": "custom"}, {"lessThan": "8.20.10", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "8.21.0", "versionType": "custom"}, {"lessThan": "8.22.4", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Jira Service Management Server", "vendor": "Atlassian", "versions": [{"lessThan": "4.13.22", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "4.14.0", "versionType": "custom"}, {"lessThan": "4.20.10", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "4.21.0", "versionType": "custom"}, {"lessThan": "4.22.4", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "Jira Service Management Data Center", "vendor": "Atlassian", "versions": [{"lessThan": "4.13.22", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "4.14.0", "versionType": "custom"}, {"lessThan": "4.20.10", "status": "affected", "version": "unspecified", "versionType": "custom"}, {"lessThan": "unspecified", "status": "affected", "version": "4.21.0", "versionType": "custom"}, {"lessThan": "4.22.4", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "datePublic": "2022-07-20T00:00:00", "descriptions": [{"lang": "en", "value": "A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The impact depends on which filters are used by each app, and how the filters are used. This vulnerability can result in authentication bypass and cross-site scripting. Atlassian has released updates that fix the root cause of this vulnerability, but has not exhaustively enumerated all potential consequences of this vulnerability. Atlassian Bamboo versions are affected before 8.0.9, from 8.1.0 before 8.1.8, and from 8.2.0 before 8.2.4. Atlassian Bitbucket versions are affected before 7.6.16, from 7.7.0 before 7.17.8, from 7.18.0 before 7.19.5, from 7.20.0 before 7.20.2, from 7.21.0 before 7.21.2, and versions 8.0.0 and 8.1.0. Atlassian Confluence versions are affected before 7.4.17, from 7.5.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and version 7.21.0. Atlassian Crowd versions are affected before 4.3.8, from 4.4.0 before 4.4.2, and version 5.0.0. Atlassian Fisheye and Crucible versions before 4.8.10 are affected. Atlassian Jira versions are affected before 8.13.22, from 8.14.0 before 8.20.10, and from 8.21.0 before 8.22.4. Atlassian Jira Service Management versions are affected before 4.13.22, from 4.14.0 before 4.20.10, and from 4.21.0 before 4.22.4."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-180", "description": "Incorrect Behavior Order: Validate Before Canonicalize (CWE-180).", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-07-20T17:25:18", "orgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66", "shortName": "atlassian"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://jira.atlassian.com/browse/BAM-21795"}, {"tags": ["x_refsource_MISC"], "url": "https://jira.atlassian.com/browse/BSERV-13370"}, {"tags": ["x_refsource_MISC"], "url": "https://jira.atlassian.com/browse/CONFSERVER-79476"}, {"tags": ["x_refsource_MISC"], "url": "https://jira.atlassian.com/browse/CWD-5815"}, {"tags": ["x_refsource_MISC"], "url": "https://jira.atlassian.com/browse/FE-7410"}, {"tags": ["x_refsource_MISC"], "url": "https://jira.atlassian.com/browse/CRUC-8541"}, {"tags": ["x_refsource_MISC"], "url": "https://jira.atlassian.com/browse/JRASERVER-73897"}, {"tags": ["x_refsource_MISC"], "url": "https://jira.atlassian.com/browse/JSDSERVER-11863"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security@atlassian.com", "DATE_PUBLIC": "2022-07-20T00:00:00", "ID": "CVE-2022-26136", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Bamboo Server", "version": {"version_data": [{"version_affected": "<", "version_value": "8.0.9"}, {"version_affected": ">=", "version_value": "8.1.0"}, {"version_affected": "<", "version_value": "8.1.8"}, {"version_affected": ">=", "version_value": "8.2.0"}, {"version_affected": "<", "version_value": "8.2.4"}]}}, {"product_name": "Bamboo Data Center", "version": {"version_data": [{"version_affected": "<", "version_value": "8.0.9"}, {"version_affected": ">=", "version_value": "8.1.0"}, {"version_affected": "<", "version_value": "8.1.8"}, {"version_affected": ">=", "version_value": "8.2.0"}, {"version_affected": "<", "version_value": "8.2.4"}]}}, {"product_name": "Bitbucket Server", "version": {"version_data": [{"version_affected": "<", "version_value": "7.6.16"}, {"version_affected": ">=", "version_value": "7.7.0"}, {"version_affected": ">=", "version_value": "7.16.0"}, {"version_affected": "<", "version_value": "7.17.8"}, {"version_affected": ">=", "version_value": "7.18.0"}, {"version_affected": "<", "version_value": "7.19.5"}, {"version_affected": ">=", "version_value": "7.20.0"}, {"version_affected": "<", "version_value": "7.20.2"}, {"version_affected": ">=", "version_value": "7.21.0"}, {"version_affected": "<", "version_value": "7.21.2"}, {"version_affected": "=", "version_value": "8.0.0"}, {"version_affected": "=", "version_value": "8.1.0"}]}}, {"product_name": "Bitbucket Data Center", "version": {"version_data": [{"version_affected": "<", "version_value": "7.6.16"}, {"version_affected": ">=", "version_value": "7.7.0"}, {"version_affected": ">=", "version_value": "7.16.0"}, {"version_affected": "<", "version_value": "7.17.8"}, {"version_affected": ">=", "version_value": "7.18.0"}, {"version_affected": "<", "version_value": "7.19.5"}, {"version_affected": ">=", "version_value": "7.20.0"}, {"version_affected": "<", "version_value": "7.20.2"}, {"version_affected": ">=", "version_value": "7.21.0"}, {"version_affected": "<", "version_value": "7.21.2"}, {"version_affected": "=", "version_value": "8.0.0"}, {"version_affected": "=", "version_value": "8.1.0"}]}}, {"product_name": "Confluence Server", "version": {"version_data": [{"version_affected": "<", "version_value": "7.4.17"}, {"version_affected": ">=", "version_value": "7.5.0"}, {"version_affected": "<", "version_value": "7.13.7"}, {"version_affected": ">=", "version_value": "7.14.0"}, {"version_affected": "<", "version_value": "7.14.3"}, {"version_affected": ">=", "version_value": "7.15.0"}, {"version_affected": "<", "version_value": "7.15.2"}, {"version_affected": ">=", "version_value": "7.16.0"}, {"version_affected": "<", "version_value": "7.16.4"}, {"version_affected": ">=", "version_value": "7.17.0"}, {"version_affected": "<", "version_value": "7.17.4"}, {"version_affected": "=", "version_value": "7.18.0"}]}}, {"product_name": "Confluence Data Center", "version": {"version_data": [{"version_affected": "<", "version_value": "7.4.17"}, {"version_affected": ">=", "version_value": "7.5.0"}, {"version_affected": "<", "version_value": "7.13.7"}, {"version_affected": ">=", "version_value": "7.14.0"}, {"version_affected": "<", "version_value": "7.14.3"}, {"version_affected": ">=", "version_value": "7.15.0"}, {"version_affected": "<", "version_value": "7.15.2"}, {"version_affected": ">=", "version_value": "7.16.0"}, {"version_affected": "<", "version_value": "7.16.4"}, {"version_affected": ">=", "version_value": "7.17.0"}, {"version_affected": "<", "version_value": "7.17.4"}, {"version_affected": "=", "version_value": "7.18.0"}]}}, {"product_name": "Crowd Server", "version": {"version_data": [{"version_affected": "<", "version_value": "4.3.8"}, {"version_affected": ">=", "version_value": "4.4.0"}, {"version_affected": "<", "version_value": "4.4.2"}, {"version_affected": "=", "version_value": "5.0.0"}]}}, {"product_name": "Crowd Data Center", "version": {"version_data": [{"version_affected": "<", "version_value": "4.3.8"}, {"version_affected": ">=", "version_value": "4.4.0"}, {"version_affected": "<", "version_value": "4.4.2"}, {"version_affected": "=", "version_value": "5.0.0"}]}}, {"product_name": "Crucible", "version": {"version_data": [{"version_affected": "<", "version_value": "4.8.10"}]}}, {"product_name": "Fisheye", "version": {"version_data": [{"version_affected": "<", "version_value": "4.8.10"}]}}, {"product_name": "Jira Core Server", "version": {"version_data": [{"version_affected": "<", "version_value": "8.13.22"}, {"version_affected": ">=", "version_value": "8.14.0"}, {"version_affected": "<", "version_value": "8.20.10"}, {"version_affected": ">=", "version_value": "8.21.0"}, {"version_affected": "<", "version_value": "8.22.4"}]}}, {"product_name": "Jira Software Server", "version": {"version_data": [{"version_affected": "<", "version_value": "8.13.22"}, {"version_affected": ">=", "version_value": "8.14.0"}, {"version_affected": "<", "version_value": "8.20.10"}, {"version_affected": ">=", "version_value": "8.21.0"}, {"version_affected": "<", "version_value": "8.22.4"}]}}, {"product_name": "Jira Software Data Center", "version": {"version_data": [{"version_affected": "<", "version_value": "8.13.22"}, {"version_affected": ">=", "version_value": "8.14.0"}, {"version_affected": "<", "version_value": "8.20.10"}, {"version_affected": ">=", "version_value": "8.21.0"}, {"version_affected": "<", "version_value": "8.22.4"}]}}, {"product_name": "Jira Service Management Server", "version": {"version_data": [{"version_affected": "<", "version_value": "4.13.22"}, {"version_affected": ">=", "version_value": "4.14.0"}, {"version_affected": "<", "version_value": "4.20.10"}, {"version_affected": ">=", "version_value": "4.21.0"}, {"version_affected": "<", "version_value": "4.22.4"}]}}, {"product_name": "Jira Service Management Data Center", "version": {"version_data": [{"version_affected": "<", "version_value": "4.13.22"}, {"version_affected": ">=", "version_value": "4.14.0"}, {"version_affected": "<", "version_value": "4.20.10"}, {"version_affected": ">=", "version_value": "4.21.0"}, {"version_affected": "<", "version_value": "4.22.4"}]}}]}, "vendor_name": "Atlassian"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The impact depends on which filters are used by each app, and how the filters are used. This vulnerability can result in authentication bypass and cross-site scripting. Atlassian has released updates that fix the root cause of this vulnerability, but has not exhaustively enumerated all potential consequences of this vulnerability. Atlassian Bamboo versions are affected before 8.0.9, from 8.1.0 before 8.1.8, and from 8.2.0 before 8.2.4. Atlassian Bitbucket versions are affected before 7.6.16, from 7.7.0 before 7.17.8, from 7.18.0 before 7.19.5, from 7.20.0 before 7.20.2, from 7.21.0 before 7.21.2, and versions 8.0.0 and 8.1.0. Atlassian Confluence versions are affected before 7.4.17, from 7.5.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and version 7.21.0. Atlassian Crowd versions are affected before 4.3.8, from 4.4.0 before 4.4.2, and version 5.0.0. Atlassian Fisheye and Crucible versions before 4.8.10 are affected. Atlassian Jira versions are affected before 8.13.22, from 8.14.0 before 8.20.10, and from 8.21.0 before 8.22.4. Atlassian Jira Service Management versions are affected before 4.13.22, from 4.14.0 before 4.20.10, and from 4.21.0 before 4.22.4."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Incorrect Behavior Order: Validate Before Canonicalize (CWE-180)."}]}]}, "references": {"reference_data": [{"name": "https://jira.atlassian.com/browse/BAM-21795", "refsource": "MISC", "url": "https://jira.atlassian.com/browse/BAM-21795"}, {"name": "https://jira.atlassian.com/browse/BSERV-13370", "refsource": "MISC", "url": "https://jira.atlassian.com/browse/BSERV-13370"}, {"name": "https://jira.atlassian.com/browse/CONFSERVER-79476", "refsource": "MISC", "url": "https://jira.atlassian.com/browse/CONFSERVER-79476"}, {"name": "https://jira.atlassian.com/browse/CWD-5815", "refsource": "MISC", "url": "https://jira.atlassian.com/browse/CWD-5815"}, {"name": "https://jira.atlassian.com/browse/FE-7410", "refsource": "MISC", "url": "https://jira.atlassian.com/browse/FE-7410"}, {"name": "https://jira.atlassian.com/browse/CRUC-8541", "refsource": "MISC", "url": "https://jira.atlassian.com/browse/CRUC-8541"}, {"name": "https://jira.atlassian.com/browse/JRASERVER-73897", "refsource": "MISC", "url": "https://jira.atlassian.com/browse/JRASERVER-73897"}, {"name": "https://jira.atlassian.com/browse/JSDSERVER-11863", "refsource": "MISC", "url": "https://jira.atlassian.com/browse/JSDSERVER-11863"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T04:56:37.592Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jira.atlassian.com/browse/BAM-21795"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jira.atlassian.com/browse/BSERV-13370"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jira.atlassian.com/browse/CONFSERVER-79476"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jira.atlassian.com/browse/CWD-5815"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jira.atlassian.com/browse/FE-7410"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jira.atlassian.com/browse/CRUC-8541"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jira.atlassian.com/browse/JRASERVER-73897"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://jira.atlassian.com/browse/JSDSERVER-11863"}]}, {"affected": [{"vendor": "atlassian", "product": "bamboo", "cpes": ["cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "7.2.0", "status": "affected", "lessThan": "7.2.10", "versionType": "custom"}, {"version": "8.0.0", "status": "affected", "lessThan": "8.0.9", "versionType": "custom"}, {"version": "8.1.0", "status": "affected", "lessThan": "8.1.8", "versionType": "custom"}, {"version": "8.2.0", "status": "affected", "lessThan": "8.2.4", "versionType": "custom"}]}, {"vendor": "atlassian", "product": "bitbucket", "cpes": ["cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "7.6.16", "versionType": "custom"}, {"version": "7.7.0", "status": "affected", "lessThan": "7.17.8", "versionType": "custom"}, {"version": "7.18.0", "status": "affected", "lessThan": "7.19.5", "versionType": "custom"}, {"version": "7.20.0", "status": "affected", "lessThan": "7.20.2", "versionType": "custom"}, {"version": "7.21.0", "status": "affected", "lessThan": "7.21.2", "versionType": "custom"}]}, {"vendor": "atlassian", "product": "bitbucket", "cpes": ["cpe:2.3:a:atlassian:bitbucket:8.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:atlassian:bitbucket:8.1.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "8.0.0", "status": "affected"}, {"version": "8.1.0", "status": "affected"}]}, {"vendor": "atlassian", "product": "confluence_data_center", "cpes": ["cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "7.4.17", "versionType": "custom"}, {"version": "7.5.0", "status": "affected", "lessThan": "7.13.7", "versionType": "custom"}, {"version": "7.14.0", "status": "affected", "lessThan": "7.14.3", "versionType": "custom"}, {"version": "7.15.0", "status": "affected", "lessThan": "7.15.2", "versionType": "custom"}, {"version": "7.16.0", "status": "affected", "lessThan": "7.16.4", "versionType": "custom"}, {"version": "7.17.0", "status": "affected", "lessThan": "7.17.4", "versionType": "custom"}]}, {"vendor": "atlassian", "product": "confluence_data_center", "cpes": ["cpe:2.3:a:atlassian:confluence_data_center:7.18.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "7.18.0", "status": "affected"}]}, {"vendor": "atlassian", "product": "confluence_server", "cpes": ["cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "7.4.17", "versionType": "custom"}, {"version": "7.5.0", "status": "affected", "lessThan": "7.13.7", "versionType": "custom"}, {"version": "7.14.0", "status": "affected", "lessThan": "7.14.3", "versionType": "custom"}, {"version": "7.15.0", "status": "affected", "lessThan": "7.15.2", "versionType": "custom"}, {"version": "7.16.0", "status": "affected", "lessThan": "7.16.4", "versionType": "custom"}, {"version": "7.17.0", "status": "affected", "lessThan": "7.17.4", "versionType": "custom"}]}, {"vendor": "atlassian", "product": "confluence_server", "cpes": ["cpe:2.3:a:atlassian:confluence_server:7.18.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "7.18.0", "status": "affected"}]}, {"vendor": "atlassian", "product": "crowd", "cpes": ["cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "4.3.8", "versionType": "custom"}, {"version": "4.4.0", "status": "affected", "lessThan": "4.4.2", "versionType": "custom"}]}, {"vendor": "atlassian", "product": "crowd", "cpes": ["cpe:2.3:a:atlassian:crowd:5.0.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "5.0.0", "status": "affected"}]}, {"vendor": "atlassian", "product": "crucible", "cpes": ["cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "4.8.10", "versionType": "custom"}]}, {"vendor": "atlassian", "product": "fisheye", "cpes": ["cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "4.8.10", "versionType": "custom"}]}, {"vendor": "atlassian", "product": "jira_data_center", "cpes": ["cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "8.13.0", "status": "affected", "lessThan": "8.13.22", "versionType": "custom"}, {"version": "8.14.0", "status": "affected", "lessThan": "8.20.10", "versionType": "custom"}, {"version": "8.21.0", "status": "affected", "lessThan": "8.22.4", "versionType": "custom"}]}, {"vendor": "atlassian", "product": "jira_server", "cpes": ["cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "8.13.0", "status": "affected", "lessThan": "8.13.22", "versionType": "custom"}, {"version": "8.14.0", "status": "affected", "lessThan": "8.20.10", "versionType": "custom"}, {"version": "8.21.0", "status": "affected", "lessThan": "8.22.4", "versionType": "custom"}]}, {"vendor": "atlassian", "product": "jira_service_desk", "cpes": ["cpe:2.3:a:atlassian:jira_service_desk:-:*:*:*:server:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "4.13.22", "versionType": "custom"}]}, {"vendor": "atlassian", "product": "jira_service_desk", "cpes": ["cpe:2.3:a:atlassian:jira_service_desk:-:*:*:*:data_center:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "4.13.22", "versionType": "custom"}]}, {"vendor": "atlassian", "product": "jira_service_management", "cpes": ["cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "4.14.0", "status": "affected", "lessThan": "4.20.10", "versionType": "custom"}, {"version": "4.21.0", "status": "affected", "lessThan": "4.22.4", "versionType": "custom"}]}, {"vendor": "atlassian", "product": "jira_service_management", "cpes": ["cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "4.14.0", "status": "affected", "lessThan": "4.20.10", "versionType": "custom"}, {"version": "4.21.0", "status": "affected", "lessThan": "4.22.4", "versionType": "custom"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-10-03T15:26:49.090400Z", "id": "CVE-2022-26136", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-03T16:43:16.268Z"}}]}, "cveMetadata": {"assignerOrgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66", "assignerShortName": "atlassian", "cveId": "CVE-2022-26136", "datePublished": "2022-07-20T17:25:18.803466Z", "dateReserved": "2022-02-25T00:00:00", "dateUpdated": "2024-10-03T16:43:16.268Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{

containers : { »

cna : { »

affected : [ »

0 : { »

product : Bamboo Server (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 8.0.9 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : unspecified (string)

status : affected (string)

version : 8.1.0 (string)

versionType : custom (string)

}

2 : { »

lessThan : 8.1.8 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

3 : { »

lessThan : unspecified (string)

status : affected (string)

version : 8.2.0 (string)

versionType : custom (string)

}

4 : { »

lessThan : 8.2.4 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

1 : { »

product : Bamboo Data Center (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 8.0.9 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : unspecified (string)

status : affected (string)

version : 8.1.0 (string)

versionType : custom (string)

}

2 : { »

lessThan : 8.1.8 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

3 : { »

lessThan : unspecified (string)

status : affected (string)

version : 8.2.0 (string)

versionType : custom (string)

}

4 : { »

lessThan : 8.2.4 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

2 : { »

product : Bitbucket Server (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 7.6.16 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.7.0 (string)

versionType : custom (string)

}

2 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.16.0 (string)

versionType : custom (string)

}

3 : { »

lessThan : 7.17.8 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

4 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.18.0 (string)

versionType : custom (string)

}

5 : { »

lessThan : 7.19.5 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

6 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.20.0 (string)

versionType : custom (string)

}

7 : { »

lessThan : 7.20.2 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

8 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.21.0 (string)

versionType : custom (string)

}

9 : { »

lessThan : 7.21.2 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

10 : { »

status : affected (string)

version : 8.0.0 (string)

}

11 : { »

status : affected (string)

version : 8.1.0 (string)

}

]

}

3 : { »

product : Bitbucket Data Center (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 7.6.16 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.7.0 (string)

versionType : custom (string)

}

2 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.16.0 (string)

versionType : custom (string)

}

3 : { »

lessThan : 7.17.8 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

4 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.18.0 (string)

versionType : custom (string)

}

5 : { »

lessThan : 7.19.5 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

6 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.20.0 (string)

versionType : custom (string)

}

7 : { »

lessThan : 7.20.2 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

8 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.21.0 (string)

versionType : custom (string)

}

9 : { »

lessThan : 7.21.2 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

10 : { »

status : affected (string)

version : 8.0.0 (string)

}

11 : { »

status : affected (string)

version : 8.1.0 (string)

}

]

}

4 : { »

product : Confluence Server (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 7.4.17 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.5.0 (string)

versionType : custom (string)

}

2 : { »

lessThan : 7.13.7 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

3 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.14.0 (string)

versionType : custom (string)

}

4 : { »

lessThan : 7.14.3 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

5 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.15.0 (string)

versionType : custom (string)

}

6 : { »

lessThan : 7.15.2 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

7 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.16.0 (string)

versionType : custom (string)

}

8 : { »

lessThan : 7.16.4 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

9 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.17.0 (string)

versionType : custom (string)

}

10 : { »

lessThan : 7.17.4 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

11 : { »

status : affected (string)

version : 7.18.0 (string)

}

]

}

5 : { »

product : Confluence Data Center (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 7.4.17 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.5.0 (string)

versionType : custom (string)

}

2 : { »

lessThan : 7.13.7 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

3 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.14.0 (string)

versionType : custom (string)

}

4 : { »

lessThan : 7.14.3 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

5 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.15.0 (string)

versionType : custom (string)

}

6 : { »

lessThan : 7.15.2 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

7 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.16.0 (string)

versionType : custom (string)

}

8 : { »

lessThan : 7.16.4 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

9 : { »

lessThan : unspecified (string)

status : affected (string)

version : 7.17.0 (string)

versionType : custom (string)

}

10 : { »

lessThan : 7.17.4 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

11 : { »

status : affected (string)

version : 7.18.0 (string)

}

]

}

6 : { »

product : Crowd Server (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 4.3.8 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : unspecified (string)

status : affected (string)

version : 4.4.0 (string)

versionType : custom (string)

}

2 : { »

lessThan : 4.4.2 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 5.0.0 (string)

}

]

}

7 : { »

product : Crowd Data Center (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 4.3.8 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : unspecified (string)

status : affected (string)

version : 4.4.0 (string)

versionType : custom (string)

}

2 : { »

lessThan : 4.4.2 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 5.0.0 (string)

}

]

}

8 : { »

product : Crucible (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 4.8.10 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

9 : { »

product : Fisheye (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 4.8.10 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

10 : { »

product : Jira Core Server (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 8.13.22 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : unspecified (string)

status : affected (string)

version : 8.14.0 (string)

versionType : custom (string)

}

2 : { »

lessThan : 8.20.10 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

3 : { »

lessThan : unspecified (string)

status : affected (string)

version : 8.21.0 (string)

versionType : custom (string)

}

4 : { »

lessThan : 8.22.4 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

11 : { »

product : Jira Software Server (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 8.13.22 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : unspecified (string)

status : affected (string)

version : 8.14.0 (string)

versionType : custom (string)

}

2 : { »

lessThan : 8.20.10 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

3 : { »

lessThan : unspecified (string)

status : affected (string)

version : 8.21.0 (string)

versionType : custom (string)

}

4 : { »

lessThan : 8.22.4 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

12 : { »

product : Jira Software Data Center (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 8.13.22 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : unspecified (string)

status : affected (string)

version : 8.14.0 (string)

versionType : custom (string)

}

2 : { »

lessThan : 8.20.10 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

3 : { »

lessThan : unspecified (string)

status : affected (string)

version : 8.21.0 (string)

versionType : custom (string)

}

4 : { »

lessThan : 8.22.4 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

13 : { »

product : Jira Service Management Server (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 4.13.22 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : unspecified (string)

status : affected (string)

version : 4.14.0 (string)

versionType : custom (string)

}

2 : { »

lessThan : 4.20.10 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

3 : { »

lessThan : unspecified (string)

status : affected (string)

version : 4.21.0 (string)

versionType : custom (string)

}

4 : { »

lessThan : 4.22.4 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

14 : { »

product : Jira Service Management Data Center (string)

vendor : Atlassian (string)

versions : [ »

0 : { »

lessThan : 4.13.22 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

1 : { »

lessThan : unspecified (string)

status : affected (string)

version : 4.14.0 (string)

versionType : custom (string)

}

2 : { »

lessThan : 4.20.10 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

3 : { »

lessThan : unspecified (string)

status : affected (string)

version : 4.21.0 (string)

versionType : custom (string)

}

4 : { »

lessThan : 4.22.4 (string)

status : affected (string)

version : unspecified (string)

versionType : custom (string)

}

]

}

]

datePublic : 2022-07-20T00:00:00 (string)

descriptions : [ »

0 : { »

lang : en (string)

value : A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The impact depends on which filters are used by each app, and how the filters are used. This vulnerability can result in authentication bypass and cross-site scripting. Atlassian has released updates that fix the root cause of this vulnerability, but has not exhaustively enumerated all potential consequences of this vulnerability. Atlassian Bamboo versions are affected before 8.0.9, from 8.1.0 before 8.1.8, and from 8.2.0 before 8.2.4. Atlassian Bitbucket versions are affected before 7.6.16, from 7.7.0 before 7.17.8, from 7.18.0 before 7.19.5, from 7.20.0 before 7.20.2, from 7.21.0 before 7.21.2, and versions 8.0.0 and 8.1.0. Atlassian Confluence versions are affected before 7.4.17, from 7.5.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and version 7.21.0. Atlassian Crowd versions are affected before 4.3.8, from 4.4.0 before 4.4.2, and version 5.0.0. Atlassian Fisheye and Crucible versions before 4.8.10 are affected. Atlassian Jira versions are affected before 8.13.22, from 8.14.0 before 8.20.10, and from 8.21.0 before 8.22.4. Atlassian Jira Service Management versions are affected before 4.13.22, from 4.14.0 before 4.20.10, and from 4.21.0 before 4.22.4. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-180 (string)

description : Incorrect Behavior Order: Validate Before Canonicalize (CWE-180). (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

dateUpdated : 2022-07-20T17:25:18 (string)

orgId : f08a6ab8-ed46-4c22-8884-d911ccfe3c66 (string)

shortName : atlassian (string)

}

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://jira.atlassian.com/browse/BAM-21795 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://jira.atlassian.com/browse/BSERV-13370 (string)

}

2 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://jira.atlassian.com/browse/CONFSERVER-79476 (string)

}

3 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://jira.atlassian.com/browse/CWD-5815 (string)

}

4 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://jira.atlassian.com/browse/FE-7410 (string)

}

5 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://jira.atlassian.com/browse/CRUC-8541 (string)

}

6 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://jira.atlassian.com/browse/JRASERVER-73897 (string)

}

7 : { »

tags : [ »

0 : x_refsource_MISC (string)

]

url : https://jira.atlassian.com/browse/JSDSERVER-11863 (string)

}

]

x_legacyV4Record : { »

CVE_data_meta : { »

ASSIGNER : security@atlassian.com (string)

DATE_PUBLIC : 2022-07-20T00:00:00 (string)

ID : CVE-2022-26136 (string)

STATE : PUBLIC (string)

}

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

product_name : Bamboo Server (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 8.0.9 (string)

}

1 : { »

version_affected : >= (string)

version_value : 8.1.0 (string)

}

2 : { »

version_affected : < (string)

version_value : 8.1.8 (string)

}

3 : { »

version_affected : >= (string)

version_value : 8.2.0 (string)

}

4 : { »

version_affected : < (string)

version_value : 8.2.4 (string)

}

]

}

1 : { »

product_name : Bamboo Data Center (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 8.0.9 (string)

}

1 : { »

version_affected : >= (string)

version_value : 8.1.0 (string)

}

2 : { »

version_affected : < (string)

version_value : 8.1.8 (string)

}

3 : { »

version_affected : >= (string)

version_value : 8.2.0 (string)

}

4 : { »

version_affected : < (string)

version_value : 8.2.4 (string)

}

]

}

2 : { »

product_name : Bitbucket Server (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 7.6.16 (string)

}

1 : { »

version_affected : >= (string)

version_value : 7.7.0 (string)

}

2 : { »

version_affected : >= (string)

version_value : 7.16.0 (string)

}

3 : { »

version_affected : < (string)

version_value : 7.17.8 (string)

}

4 : { »

version_affected : >= (string)

version_value : 7.18.0 (string)

}

5 : { »

version_affected : < (string)

version_value : 7.19.5 (string)

}

6 : { »

version_affected : >= (string)

version_value : 7.20.0 (string)

}

7 : { »

version_affected : < (string)

version_value : 7.20.2 (string)

}

8 : { »

version_affected : >= (string)

version_value : 7.21.0 (string)

}

9 : { »

version_affected : < (string)

version_value : 7.21.2 (string)

}

10 : { »

version_affected : = (string)

version_value : 8.0.0 (string)

}

11 : { »

version_affected : = (string)

version_value : 8.1.0 (string)

}

]

}

3 : { »

product_name : Bitbucket Data Center (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 7.6.16 (string)

}

1 : { »

version_affected : >= (string)

version_value : 7.7.0 (string)

}

2 : { »

version_affected : >= (string)

version_value : 7.16.0 (string)

}

3 : { »

version_affected : < (string)

version_value : 7.17.8 (string)

}

4 : { »

version_affected : >= (string)

version_value : 7.18.0 (string)

}

5 : { »

version_affected : < (string)

version_value : 7.19.5 (string)

}

6 : { »

version_affected : >= (string)

version_value : 7.20.0 (string)

}

7 : { »

version_affected : < (string)

version_value : 7.20.2 (string)

}

8 : { »

version_affected : >= (string)

version_value : 7.21.0 (string)

}

9 : { »

version_affected : < (string)

version_value : 7.21.2 (string)

}

10 : { »

version_affected : = (string)

version_value : 8.0.0 (string)

}

11 : { »

version_affected : = (string)

version_value : 8.1.0 (string)

}

]

}

4 : { »

product_name : Confluence Server (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 7.4.17 (string)

}

1 : { »

version_affected : >= (string)

version_value : 7.5.0 (string)

}

2 : { »

version_affected : < (string)

version_value : 7.13.7 (string)

}

3 : { »

version_affected : >= (string)

version_value : 7.14.0 (string)

}

4 : { »

version_affected : < (string)

version_value : 7.14.3 (string)

}

5 : { »

version_affected : >= (string)

version_value : 7.15.0 (string)

}

6 : { »

version_affected : < (string)

version_value : 7.15.2 (string)

}

7 : { »

version_affected : >= (string)

version_value : 7.16.0 (string)

}

8 : { »

version_affected : < (string)

version_value : 7.16.4 (string)

}

9 : { »

version_affected : >= (string)

version_value : 7.17.0 (string)

}

10 : { »

version_affected : < (string)

version_value : 7.17.4 (string)

}

11 : { »

version_affected : = (string)

version_value : 7.18.0 (string)

}

]

}

5 : { »

product_name : Confluence Data Center (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 7.4.17 (string)

}

1 : { »

version_affected : >= (string)

version_value : 7.5.0 (string)

}

2 : { »

version_affected : < (string)

version_value : 7.13.7 (string)

}

3 : { »

version_affected : >= (string)

version_value : 7.14.0 (string)

}

4 : { »

version_affected : < (string)

version_value : 7.14.3 (string)

}

5 : { »

version_affected : >= (string)

version_value : 7.15.0 (string)

}

6 : { »

version_affected : < (string)

version_value : 7.15.2 (string)

}

7 : { »

version_affected : >= (string)

version_value : 7.16.0 (string)

}

8 : { »

version_affected : < (string)

version_value : 7.16.4 (string)

}

9 : { »

version_affected : >= (string)

version_value : 7.17.0 (string)

}

10 : { »

version_affected : < (string)

version_value : 7.17.4 (string)

}

11 : { »

version_affected : = (string)

version_value : 7.18.0 (string)

}

]

}

6 : { »

product_name : Crowd Server (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 4.3.8 (string)

}

1 : { »

version_affected : >= (string)

version_value : 4.4.0 (string)

}

2 : { »

version_affected : < (string)

version_value : 4.4.2 (string)

}

3 : { »

version_affected : = (string)

version_value : 5.0.0 (string)

}

]

}

7 : { »

product_name : Crowd Data Center (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 4.3.8 (string)

}

1 : { »

version_affected : >= (string)

version_value : 4.4.0 (string)

}

2 : { »

version_affected : < (string)

version_value : 4.4.2 (string)

}

3 : { »

version_affected : = (string)

version_value : 5.0.0 (string)

}

]

}

8 : { »

product_name : Crucible (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 4.8.10 (string)

}

]

}

9 : { »

product_name : Fisheye (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 4.8.10 (string)

}

]

}

10 : { »

product_name : Jira Core Server (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 8.13.22 (string)

}

1 : { »

version_affected : >= (string)

version_value : 8.14.0 (string)

}

2 : { »

version_affected : < (string)

version_value : 8.20.10 (string)

}

3 : { »

version_affected : >= (string)

version_value : 8.21.0 (string)

}

4 : { »

version_affected : < (string)

version_value : 8.22.4 (string)

}

]

}

11 : { »

product_name : Jira Software Server (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 8.13.22 (string)

}

1 : { »

version_affected : >= (string)

version_value : 8.14.0 (string)

}

2 : { »

version_affected : < (string)

version_value : 8.20.10 (string)

}

3 : { »

version_affected : >= (string)

version_value : 8.21.0 (string)

}

4 : { »

version_affected : < (string)

version_value : 8.22.4 (string)

}

]

}

12 : { »

product_name : Jira Software Data Center (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 8.13.22 (string)

}

1 : { »

version_affected : >= (string)

version_value : 8.14.0 (string)

}

2 : { »

version_affected : < (string)

version_value : 8.20.10 (string)

}

3 : { »

version_affected : >= (string)

version_value : 8.21.0 (string)

}

4 : { »

version_affected : < (string)

version_value : 8.22.4 (string)

}

]

}

13 : { »

product_name : Jira Service Management Server (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 4.13.22 (string)

}

1 : { »

version_affected : >= (string)

version_value : 4.14.0 (string)

}

2 : { »

version_affected : < (string)

version_value : 4.20.10 (string)

}

3 : { »

version_affected : >= (string)

version_value : 4.21.0 (string)

}

4 : { »

version_affected : < (string)

version_value : 4.22.4 (string)

}

]

}

14 : { »

product_name : Jira Service Management Data Center (string)

version : { »

version_data : [ »

0 : { »

version_affected : < (string)

version_value : 4.13.22 (string)

}

1 : { »

version_affected : >= (string)

version_value : 4.14.0 (string)

}

2 : { »

version_affected : < (string)

version_value : 4.20.10 (string)

}

3 : { »

version_affected : >= (string)

version_value : 4.21.0 (string)

}

4 : { »

version_affected : < (string)

version_value : 4.22.4 (string)

}

]

}

]

}

vendor_name : Atlassian (string)

}

]

}

data_format : MITRE (string)

data_type : CVE (string)

data_version : 4.0 (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Incorrect Behavior Order: Validate Before Canonicalize (CWE-180). (string)

}

]

}

]

}

references : { »

reference_data : [ »

0 : { »

name : https://jira.atlassian.com/browse/BAM-21795 (string)

refsource : MISC (string)

url : https://jira.atlassian.com/browse/BAM-21795 (string)

}

1 : { »

name : https://jira.atlassian.com/browse/BSERV-13370 (string)

refsource : MISC (string)

url : https://jira.atlassian.com/browse/BSERV-13370 (string)

}

2 : { »

name : https://jira.atlassian.com/browse/CONFSERVER-79476 (string)

refsource : MISC (string)

url : https://jira.atlassian.com/browse/CONFSERVER-79476 (string)

}

3 : { »

name : https://jira.atlassian.com/browse/CWD-5815 (string)

refsource : MISC (string)

url : https://jira.atlassian.com/browse/CWD-5815 (string)

}

4 : { »

name : https://jira.atlassian.com/browse/FE-7410 (string)

refsource : MISC (string)

url : https://jira.atlassian.com/browse/FE-7410 (string)

}

5 : { »

name : https://jira.atlassian.com/browse/CRUC-8541 (string)

refsource : MISC (string)

url : https://jira.atlassian.com/browse/CRUC-8541 (string)

}

6 : { »

name : https://jira.atlassian.com/browse/JRASERVER-73897 (string)

refsource : MISC (string)

url : https://jira.atlassian.com/browse/JRASERVER-73897 (string)

}

7 : { »

name : https://jira.atlassian.com/browse/JSDSERVER-11863 (string)

refsource : MISC (string)

url : https://jira.atlassian.com/browse/JSDSERVER-11863 (string)

}

]

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T04:56:37.592Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://jira.atlassian.com/browse/BAM-21795 (string)

}

1 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://jira.atlassian.com/browse/BSERV-13370 (string)

}

2 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://jira.atlassian.com/browse/CONFSERVER-79476 (string)

}

3 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://jira.atlassian.com/browse/CWD-5815 (string)

}

4 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://jira.atlassian.com/browse/FE-7410 (string)

}

5 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://jira.atlassian.com/browse/CRUC-8541 (string)

}

6 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://jira.atlassian.com/browse/JRASERVER-73897 (string)

}

7 : { »

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

url : https://jira.atlassian.com/browse/JSDSERVER-11863 (string)

}

]

}

1 : { »

affected : [ »

0 : { »

vendor : atlassian (string)

product : bamboo (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 7.2.0 (string)

status : affected (string)

lessThan : 7.2.10 (string)

versionType : custom (string)

}

1 : { »

version : 8.0.0 (string)

status : affected (string)

lessThan : 8.0.9 (string)

versionType : custom (string)

}

2 : { »

version : 8.1.0 (string)

status : affected (string)

lessThan : 8.1.8 (string)

versionType : custom (string)

}

3 : { »

version : 8.2.0 (string)

status : affected (string)

lessThan : 8.2.4 (string)

versionType : custom (string)

}

]

}

1 : { »

vendor : atlassian (string)

product : bitbucket (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 7.6.16 (string)

versionType : custom (string)

}

1 : { »

version : 7.7.0 (string)

status : affected (string)

lessThan : 7.17.8 (string)

versionType : custom (string)

}

2 : { »

version : 7.18.0 (string)

status : affected (string)

lessThan : 7.19.5 (string)

versionType : custom (string)

}

3 : { »

version : 7.20.0 (string)

status : affected (string)

lessThan : 7.20.2 (string)

versionType : custom (string)

}

4 : { »

version : 7.21.0 (string)

status : affected (string)

lessThan : 7.21.2 (string)

versionType : custom (string)

}

]

}

2 : { »

vendor : atlassian (string)

product : bitbucket (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:bitbucket:8.0.0:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:atlassian:bitbucket:8.1.0:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 8.0.0 (string)

status : affected (string)

}

1 : { »

version : 8.1.0 (string)

status : affected (string)

}

]

}

3 : { »

vendor : atlassian (string)

product : confluence_data_center (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 7.4.17 (string)

versionType : custom (string)

}

1 : { »

version : 7.5.0 (string)

status : affected (string)

lessThan : 7.13.7 (string)

versionType : custom (string)

}

2 : { »

version : 7.14.0 (string)

status : affected (string)

lessThan : 7.14.3 (string)

versionType : custom (string)

}

3 : { »

version : 7.15.0 (string)

status : affected (string)

lessThan : 7.15.2 (string)

versionType : custom (string)

}

4 : { »

version : 7.16.0 (string)

status : affected (string)

lessThan : 7.16.4 (string)

versionType : custom (string)

}

5 : { »

version : 7.17.0 (string)

status : affected (string)

lessThan : 7.17.4 (string)

versionType : custom (string)

}

]

}

4 : { »

vendor : atlassian (string)

product : confluence_data_center (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:confluence_data_center:7.18.0:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 7.18.0 (string)

status : affected (string)

}

]

}

5 : { »

vendor : atlassian (string)

product : confluence_server (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 7.4.17 (string)

versionType : custom (string)

}

1 : { »

version : 7.5.0 (string)

status : affected (string)

lessThan : 7.13.7 (string)

versionType : custom (string)

}

2 : { »

version : 7.14.0 (string)

status : affected (string)

lessThan : 7.14.3 (string)

versionType : custom (string)

}

3 : { »

version : 7.15.0 (string)

status : affected (string)

lessThan : 7.15.2 (string)

versionType : custom (string)

}

4 : { »

version : 7.16.0 (string)

status : affected (string)

lessThan : 7.16.4 (string)

versionType : custom (string)

}

5 : { »

version : 7.17.0 (string)

status : affected (string)

lessThan : 7.17.4 (string)

versionType : custom (string)

}

]

}

6 : { »

vendor : atlassian (string)

product : confluence_server (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:confluence_server:7.18.0:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 7.18.0 (string)

status : affected (string)

}

]

}

7 : { »

vendor : atlassian (string)

product : crowd (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 4.3.8 (string)

versionType : custom (string)

}

1 : { »

version : 4.4.0 (string)

status : affected (string)

lessThan : 4.4.2 (string)

versionType : custom (string)

}

]

}

8 : { »

vendor : atlassian (string)

product : crowd (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:crowd:5.0.0:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 5.0.0 (string)

status : affected (string)

}

]

}

9 : { »

vendor : atlassian (string)

product : crucible (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 4.8.10 (string)

versionType : custom (string)

}

]

}

10 : { »

vendor : atlassian (string)

product : fisheye (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 4.8.10 (string)

versionType : custom (string)

}

]

}

11 : { »

vendor : atlassian (string)

product : jira_data_center (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 8.13.0 (string)

status : affected (string)

lessThan : 8.13.22 (string)

versionType : custom (string)

}

1 : { »

version : 8.14.0 (string)

status : affected (string)

lessThan : 8.20.10 (string)

versionType : custom (string)

}

2 : { »

version : 8.21.0 (string)

status : affected (string)

lessThan : 8.22.4 (string)

versionType : custom (string)

}

]

}

12 : { »

vendor : atlassian (string)

product : jira_server (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 8.13.0 (string)

status : affected (string)

lessThan : 8.13.22 (string)

versionType : custom (string)

}

1 : { »

version : 8.14.0 (string)

status : affected (string)

lessThan : 8.20.10 (string)

versionType : custom (string)

}

2 : { »

version : 8.21.0 (string)

status : affected (string)

lessThan : 8.22.4 (string)

versionType : custom (string)

}

]

}

13 : { »

vendor : atlassian (string)

product : jira_service_desk (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:jira_service_desk:-:*:*:*:server:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 4.13.22 (string)

versionType : custom (string)

}

]

}

14 : { »

vendor : atlassian (string)

product : jira_service_desk (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:jira_service_desk:-:*:*:*:data_center:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 0 (string)

status : affected (string)

lessThan : 4.13.22 (string)

versionType : custom (string)

}

]

}

15 : { »

vendor : atlassian (string)

product : jira_service_management (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 4.14.0 (string)

status : affected (string)

lessThan : 4.20.10 (string)

versionType : custom (string)

}

1 : { »

version : 4.21.0 (string)

status : affected (string)

lessThan : 4.22.4 (string)

versionType : custom (string)

}

]

}

16 : { »

vendor : atlassian (string)

product : jira_service_management (string)

cpes : [ »

0 : cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : 4.14.0 (string)

status : affected (string)

lessThan : 4.20.10 (string)

versionType : custom (string)

}

1 : { »

version : 4.21.0 (string)

status : affected (string)

lessThan : 4.22.4 (string)

versionType : custom (string)

}

]

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 9.8 (number)

attackVector : NETWORK (string)

baseSeverity : CRITICAL (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-10-03T15:26:49.090400Z (string)

id : CVE-2022-26136 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-03T16:43:16.268Z (string)

}

]

}

cveMetadata : { »

assignerOrgId : f08a6ab8-ed46-4c22-8884-d911ccfe3c66 (string)

assignerShortName : atlassian (string)

cveId : CVE-2022-26136 (string)

datePublished : 2022-07-20T17:25:18.803466Z (string)

dateReserved : 2022-02-25T00:00:00 (string)

dateUpdated : 2024-10-03T16:43:16.268Z (string)

state : PUBLISHED (string)

}

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://jira.atlassian.com/browse/BAM-21795", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://jira.atlassian.com/browse/BSERV-13370", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://jira.atlassian.com/browse/CONFSERVER-79476", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://jira.atlassian.com/browse/CWD-5815", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://jira.atlassian.com/browse/FE-7410", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://jira.atlassian.com/browse/CRUC-8541", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://jira.atlassian.com/browse/JRASERVER-73897", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://jira.atlassian.com/browse/JSDSERVER-11863", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T04:56:37.592Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2022-26136", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-10-03T15:26:49.090400Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*"], "vendor": "atlassian", "product": "bamboo", "versions": [{"status": "affected", "version": "7.2.0", "lessThan": "7.2.10", "versionType": "custom"}, {"status": "affected", "version": "8.0.0", "lessThan": "8.0.9", "versionType": "custom"}, {"status": "affected", "version": "8.1.0", "lessThan": "8.1.8", "versionType": "custom"}, {"status": "affected", "version": "8.2.0", "lessThan": "8.2.4", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*"], "vendor": "atlassian", "product": "bitbucket", "versions": [{"status": "affected", "version": "0", "lessThan": "7.6.16", "versionType": "custom"}, {"status": "affected", "version": "7.7.0", "lessThan": "7.17.8", "versionType": "custom"}, {"status": "affected", "version": "7.18.0", "lessThan": "7.19.5", "versionType": "custom"}, {"status": "affected", "version": "7.20.0", "lessThan": "7.20.2", "versionType": "custom"}, {"status": "affected", "version": "7.21.0", "lessThan": "7.21.2", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:bitbucket:8.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:atlassian:bitbucket:8.1.0:*:*:*:*:*:*:*"], "vendor": "atlassian", "product": "bitbucket", "versions": [{"status": "affected", "version": "8.0.0"}, {"status": "affected", "version": "8.1.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*"], "vendor": "atlassian", "product": "confluence_data_center", "versions": [{"status": "affected", "version": "0", "lessThan": "7.4.17", "versionType": "custom"}, {"status": "affected", "version": "7.5.0", "lessThan": "7.13.7", "versionType": "custom"}, {"status": "affected", "version": "7.14.0", "lessThan": "7.14.3", "versionType": "custom"}, {"status": "affected", "version": "7.15.0", "lessThan": "7.15.2", "versionType": "custom"}, {"status": "affected", "version": "7.16.0", "lessThan": "7.16.4", "versionType": "custom"}, {"status": "affected", "version": "7.17.0", "lessThan": "7.17.4", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:confluence_data_center:7.18.0:*:*:*:*:*:*:*"], "vendor": "atlassian", "product": "confluence_data_center", "versions": [{"status": "affected", "version": "7.18.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*"], "vendor": "atlassian", "product": "confluence_server", "versions": [{"status": "affected", "version": "0", "lessThan": "7.4.17", "versionType": "custom"}, {"status": "affected", "version": "7.5.0", "lessThan": "7.13.7", "versionType": "custom"}, {"status": "affected", "version": "7.14.0", "lessThan": "7.14.3", "versionType": "custom"}, {"status": "affected", "version": "7.15.0", "lessThan": "7.15.2", "versionType": "custom"}, {"status": "affected", "version": "7.16.0", "lessThan": "7.16.4", "versionType": "custom"}, {"status": "affected", "version": "7.17.0", "lessThan": "7.17.4", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:confluence_server:7.18.0:*:*:*:*:*:*:*"], "vendor": "atlassian", "product": "confluence_server", "versions": [{"status": "affected", "version": "7.18.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*"], "vendor": "atlassian", "product": "crowd", "versions": [{"status": "affected", "version": "0", "lessThan": "4.3.8", "versionType": "custom"}, {"status": "affected", "version": "4.4.0", "lessThan": "4.4.2", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:crowd:5.0.0:*:*:*:*:*:*:*"], "vendor": "atlassian", "product": "crowd", "versions": [{"status": "affected", "version": "5.0.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*"], "vendor": "atlassian", "product": "crucible", "versions": [{"status": "affected", "version": "0", "lessThan": "4.8.10", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*"], "vendor": "atlassian", "product": "fisheye", "versions": [{"status": "affected", "version": "0", "lessThan": "4.8.10", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*"], "vendor": "atlassian", "product": "jira_data_center", "versions": [{"status": "affected", "version": "8.13.0", "lessThan": "8.13.22", "versionType": "custom"}, {"status": "affected", "version": "8.14.0", "lessThan": "8.20.10", "versionType": "custom"}, {"status": "affected", "version": "8.21.0", "lessThan": "8.22.4", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*"], "vendor": "atlassian", "product": "jira_server", "versions": [{"status": "affected", "version": "8.13.0", "lessThan": "8.13.22", "versionType": "custom"}, {"status": "affected", "version": "8.14.0", "lessThan": "8.20.10", "versionType": "custom"}, {"status": "affected", "version": "8.21.0", "lessThan": "8.22.4", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:jira_service_desk:-:*:*:*:server:*:*:*"], "vendor": "atlassian", "product": "jira_service_desk", "versions": [{"status": "affected", "version": "0", "lessThan": "4.13.22", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:jira_service_desk:-:*:*:*:data_center:*:*:*"], "vendor": "atlassian", "product": "jira_service_desk", "versions": [{"status": "affected", "version": "0", "lessThan": "4.13.22", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*"], "vendor": "atlassian", "product": "jira_service_management", "versions": [{"status": "affected", "version": "4.14.0", "lessThan": "4.20.10", "versionType": "custom"}, {"status": "affected", "version": "4.21.0", "lessThan": "4.22.4", "versionType": "custom"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:*"], "vendor": "atlassian", "product": "jira_service_management", "versions": [{"status": "affected", "version": "4.14.0", "lessThan": "4.20.10", "versionType": "custom"}, {"status": "affected", "version": "4.21.0", "lessThan": "4.22.4", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-03T15:54:32.628Z"}}], "cna": {"affected": [{"vendor": "Atlassian", "product": "Bamboo Server", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "8.0.9", "versionType": "custom"}, {"status": "affected", "version": "8.1.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "8.1.8", "versionType": "custom"}, {"status": "affected", "version": "8.2.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "8.2.4", "versionType": "custom"}]}, {"vendor": "Atlassian", "product": "Bamboo Data Center", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "8.0.9", "versionType": "custom"}, {"status": "affected", "version": "8.1.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "8.1.8", "versionType": "custom"}, {"status": "affected", "version": "8.2.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "8.2.4", "versionType": "custom"}]}, {"vendor": "Atlassian", "product": "Bitbucket Server", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "7.6.16", "versionType": "custom"}, {"status": "affected", "version": "7.7.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "7.16.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.17.8", "versionType": "custom"}, {"status": "affected", "version": "7.18.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.19.5", "versionType": "custom"}, {"status": "affected", "version": "7.20.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.20.2", "versionType": "custom"}, {"status": "affected", "version": "7.21.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.21.2", "versionType": "custom"}, {"status": "affected", "version": "8.0.0"}, {"status": "affected", "version": "8.1.0"}]}, {"vendor": "Atlassian", "product": "Bitbucket Data Center", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "7.6.16", "versionType": "custom"}, {"status": "affected", "version": "7.7.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "7.16.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.17.8", "versionType": "custom"}, {"status": "affected", "version": "7.18.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.19.5", "versionType": "custom"}, {"status": "affected", "version": "7.20.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.20.2", "versionType": "custom"}, {"status": "affected", "version": "7.21.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.21.2", "versionType": "custom"}, {"status": "affected", "version": "8.0.0"}, {"status": "affected", "version": "8.1.0"}]}, {"vendor": "Atlassian", "product": "Confluence Server", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "7.4.17", "versionType": "custom"}, {"status": "affected", "version": "7.5.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.13.7", "versionType": "custom"}, {"status": "affected", "version": "7.14.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.14.3", "versionType": "custom"}, {"status": "affected", "version": "7.15.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.15.2", "versionType": "custom"}, {"status": "affected", "version": "7.16.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.16.4", "versionType": "custom"}, {"status": "affected", "version": "7.17.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.17.4", "versionType": "custom"}, {"status": "affected", "version": "7.18.0"}]}, {"vendor": "Atlassian", "product": "Confluence Data Center", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "7.4.17", "versionType": "custom"}, {"status": "affected", "version": "7.5.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.13.7", "versionType": "custom"}, {"status": "affected", "version": "7.14.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.14.3", "versionType": "custom"}, {"status": "affected", "version": "7.15.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.15.2", "versionType": "custom"}, {"status": "affected", "version": "7.16.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.16.4", "versionType": "custom"}, {"status": "affected", "version": "7.17.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "7.17.4", "versionType": "custom"}, {"status": "affected", "version": "7.18.0"}]}, {"vendor": "Atlassian", "product": "Crowd Server", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "4.3.8", "versionType": "custom"}, {"status": "affected", "version": "4.4.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "4.4.2", "versionType": "custom"}, {"status": "affected", "version": "5.0.0"}]}, {"vendor": "Atlassian", "product": "Crowd Data Center", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "4.3.8", "versionType": "custom"}, {"status": "affected", "version": "4.4.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "4.4.2", "versionType": "custom"}, {"status": "affected", "version": "5.0.0"}]}, {"vendor": "Atlassian", "product": "Crucible", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "4.8.10", "versionType": "custom"}]}, {"vendor": "Atlassian", "product": "Fisheye", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "4.8.10", "versionType": "custom"}]}, {"vendor": "Atlassian", "product": "Jira Core Server", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "8.13.22", "versionType": "custom"}, {"status": "affected", "version": "8.14.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "8.20.10", "versionType": "custom"}, {"status": "affected", "version": "8.21.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "8.22.4", "versionType": "custom"}]}, {"vendor": "Atlassian", "product": "Jira Software Server", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "8.13.22", "versionType": "custom"}, {"status": "affected", "version": "8.14.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "8.20.10", "versionType": "custom"}, {"status": "affected", "version": "8.21.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "8.22.4", "versionType": "custom"}]}, {"vendor": "Atlassian", "product": "Jira Software Data Center", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "8.13.22", "versionType": "custom"}, {"status": "affected", "version": "8.14.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "8.20.10", "versionType": "custom"}, {"status": "affected", "version": "8.21.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "8.22.4", "versionType": "custom"}]}, {"vendor": "Atlassian", "product": "Jira Service Management Server", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "4.13.22", "versionType": "custom"}, {"status": "affected", "version": "4.14.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "4.20.10", "versionType": "custom"}, {"status": "affected", "version": "4.21.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "4.22.4", "versionType": "custom"}]}, {"vendor": "Atlassian", "product": "Jira Service Management Data Center", "versions": [{"status": "affected", "version": "unspecified", "lessThan": "4.13.22", "versionType": "custom"}, {"status": "affected", "version": "4.14.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "4.20.10", "versionType": "custom"}, {"status": "affected", "version": "4.21.0", "lessThan": "unspecified", "versionType": "custom"}, {"status": "affected", "version": "unspecified", "lessThan": "4.22.4", "versionType": "custom"}]}], "datePublic": "2022-07-20T00:00:00", "references": [{"url": "https://jira.atlassian.com/browse/BAM-21795", "tags": ["x_refsource_MISC"]}, {"url": "https://jira.atlassian.com/browse/BSERV-13370", "tags": ["x_refsource_MISC"]}, {"url": "https://jira.atlassian.com/browse/CONFSERVER-79476", "tags": ["x_refsource_MISC"]}, {"url": "https://jira.atlassian.com/browse/CWD-5815", "tags": ["x_refsource_MISC"]}, {"url": "https://jira.atlassian.com/browse/FE-7410", "tags": ["x_refsource_MISC"]}, {"url": "https://jira.atlassian.com/browse/CRUC-8541", "tags": ["x_refsource_MISC"]}, {"url": "https://jira.atlassian.com/browse/JRASERVER-73897", "tags": ["x_refsource_MISC"]}, {"url": "https://jira.atlassian.com/browse/JSDSERVER-11863", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The impact depends on which filters are used by each app, and how the filters are used. This vulnerability can result in authentication bypass and cross-site scripting. Atlassian has released updates that fix the root cause of this vulnerability, but has not exhaustively enumerated all potential consequences of this vulnerability. Atlassian Bamboo versions are affected before 8.0.9, from 8.1.0 before 8.1.8, and from 8.2.0 before 8.2.4. Atlassian Bitbucket versions are affected before 7.6.16, from 7.7.0 before 7.17.8, from 7.18.0 before 7.19.5, from 7.20.0 before 7.20.2, from 7.21.0 before 7.21.2, and versions 8.0.0 and 8.1.0. Atlassian Confluence versions are affected before 7.4.17, from 7.5.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and version 7.21.0. Atlassian Crowd versions are affected before 4.3.8, from 4.4.0 before 4.4.2, and version 5.0.0. Atlassian Fisheye and Crucible versions before 4.8.10 are affected. Atlassian Jira versions are affected before 8.13.22, from 8.14.0 before 8.20.10, and from 8.21.0 before 8.22.4. Atlassian Jira Service Management versions are affected before 4.13.22, from 4.14.0 before 4.20.10, and from 4.21.0 before 4.22.4."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-180", "description": "Incorrect Behavior Order: Validate Before Canonicalize (CWE-180)."}]}], "providerMetadata": {"orgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66", "shortName": "atlassian", "dateUpdated": "2022-07-20T17:25:18"}, "x_legacyV4Record": {"affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"version": {"version_data": [{"version_value": "8.0.9", "version_affected": "<"}, {"version_value": "8.1.0", "version_affected": ">="}, {"version_value": "8.1.8", "version_affected": "<"}, {"version_value": "8.2.0", "version_affected": ">="}, {"version_value": "8.2.4", "version_affected": "<"}]}, "product_name": "Bamboo Server"}, {"version": {"version_data": [{"version_value": "8.0.9", "version_affected": "<"}, {"version_value": "8.1.0", "version_affected": ">="}, {"version_value": "8.1.8", "version_affected": "<"}, {"version_value": "8.2.0", "version_affected": ">="}, {"version_value": "8.2.4", "version_affected": "<"}]}, "product_name": "Bamboo Data Center"}, {"version": {"version_data": [{"version_value": "7.6.16", "version_affected": "<"}, {"version_value": "7.7.0", "version_affected": ">="}, {"version_value": "7.16.0", "version_affected": ">="}, {"version_value": "7.17.8", "version_affected": "<"}, {"version_value": "7.18.0", "version_affected": ">="}, {"version_value": "7.19.5", "version_affected": "<"}, {"version_value": "7.20.0", "version_affected": ">="}, {"version_value": "7.20.2", "version_affected": "<"}, {"version_value": "7.21.0", "version_affected": ">="}, {"version_value": "7.21.2", "version_affected": "<"}, {"version_value": "8.0.0", "version_affected": "="}, {"version_value": "8.1.0", "version_affected": "="}]}, "product_name": "Bitbucket Server"}, {"version": {"version_data": [{"version_value": "7.6.16", "version_affected": "<"}, {"version_value": "7.7.0", "version_affected": ">="}, {"version_value": "7.16.0", "version_affected": ">="}, {"version_value": "7.17.8", "version_affected": "<"}, {"version_value": "7.18.0", "version_affected": ">="}, {"version_value": "7.19.5", "version_affected": "<"}, {"version_value": "7.20.0", "version_affected": ">="}, {"version_value": "7.20.2", "version_affected": "<"}, {"version_value": "7.21.0", "version_affected": ">="}, {"version_value": "7.21.2", "version_affected": "<"}, {"version_value": "8.0.0", "version_affected": "="}, {"version_value": "8.1.0", "version_affected": "="}]}, "product_name": "Bitbucket Data Center"}, {"version": {"version_data": [{"version_value": "7.4.17", "version_affected": "<"}, {"version_value": "7.5.0", "version_affected": ">="}, {"version_value": "7.13.7", "version_affected": "<"}, {"version_value": "7.14.0", "version_affected": ">="}, {"version_value": "7.14.3", "version_affected": "<"}, {"version_value": "7.15.0", "version_affected": ">="}, {"version_value": "7.15.2", "version_affected": "<"}, {"version_value": "7.16.0", "version_affected": ">="}, {"version_value": "7.16.4", "version_affected": "<"}, {"version_value": "7.17.0", "version_affected": ">="}, {"version_value": "7.17.4", "version_affected": "<"}, {"version_value": "7.18.0", "version_affected": "="}]}, "product_name": "Confluence Server"}, {"version": {"version_data": [{"version_value": "7.4.17", "version_affected": "<"}, {"version_value": "7.5.0", "version_affected": ">="}, {"version_value": "7.13.7", "version_affected": "<"}, {"version_value": "7.14.0", "version_affected": ">="}, {"version_value": "7.14.3", "version_affected": "<"}, {"version_value": "7.15.0", "version_affected": ">="}, {"version_value": "7.15.2", "version_affected": "<"}, {"version_value": "7.16.0", "version_affected": ">="}, {"version_value": "7.16.4", "version_affected": "<"}, {"version_value": "7.17.0", "version_affected": ">="}, {"version_value": "7.17.4", "version_affected": "<"}, {"version_value": "7.18.0", "version_affected": "="}]}, "product_name": "Confluence Data Center"}, {"version": {"version_data": [{"version_value": "4.3.8", "version_affected": "<"}, {"version_value": "4.4.0", "version_affected": ">="}, {"version_value": "4.4.2", "version_affected": "<"}, {"version_value": "5.0.0", "version_affected": "="}]}, "product_name": "Crowd Server"}, {"version": {"version_data": [{"version_value": "4.3.8", "version_affected": "<"}, {"version_value": "4.4.0", "version_affected": ">="}, {"version_value": "4.4.2", "version_affected": "<"}, {"version_value": "5.0.0", "version_affected": "="}]}, "product_name": "Crowd Data Center"}, {"version": {"version_data": [{"version_value": "4.8.10", "version_affected": "<"}]}, "product_name": "Crucible"}, {"version": {"version_data": [{"version_value": "4.8.10", "version_affected": "<"}]}, "product_name": "Fisheye"}, {"version": {"version_data": [{"version_value": "8.13.22", "version_affected": "<"}, {"version_value": "8.14.0", "version_affected": ">="}, {"version_value": "8.20.10", "version_affected": "<"}, {"version_value": "8.21.0", "version_affected": ">="}, {"version_value": "8.22.4", "version_affected": "<"}]}, "product_name": "Jira Core Server"}, {"version": {"version_data": [{"version_value": "8.13.22", "version_affected": "<"}, {"version_value": "8.14.0", "version_affected": ">="}, {"version_value": "8.20.10", "version_affected": "<"}, {"version_value": "8.21.0", "version_affected": ">="}, {"version_value": "8.22.4", "version_affected": "<"}]}, "product_name": "Jira Software Server"}, {"version": {"version_data": [{"version_value": "8.13.22", "version_affected": "<"}, {"version_value": "8.14.0", "version_affected": ">="}, {"version_value": "8.20.10", "version_affected": "<"}, {"version_value": "8.21.0", "version_affected": ">="}, {"version_value": "8.22.4", "version_affected": "<"}]}, "product_name": "Jira Software Data Center"}, {"version": {"version_data": [{"version_value": "4.13.22", "version_affected": "<"}, {"version_value": "4.14.0", "version_affected": ">="}, {"version_value": "4.20.10", "version_affected": "<"}, {"version_value": "4.21.0", "version_affected": ">="}, {"version_value": "4.22.4", "version_affected": "<"}]}, "product_name": "Jira Service Management Server"}, {"version": {"version_data": [{"version_value": "4.13.22", "version_affected": "<"}, {"version_value": "4.14.0", "version_affected": ">="}, {"version_value": "4.20.10", "version_affected": "<"}, {"version_value": "4.21.0", "version_affected": ">="}, {"version_value": "4.22.4", "version_affected": "<"}]}, "product_name": "Jira Service Management Data Center"}]}, "vendor_name": "Atlassian"}]}}, "data_type": "CVE", "references": {"reference_data": [{"url": "https://jira.atlassian.com/browse/BAM-21795", "name": "https://jira.atlassian.com/browse/BAM-21795", "refsource": "MISC"}, {"url": "https://jira.atlassian.com/browse/BSERV-13370", "name": "https://jira.atlassian.com/browse/BSERV-13370", "refsource": "MISC"}, {"url": "https://jira.atlassian.com/browse/CONFSERVER-79476", "name": "https://jira.atlassian.com/browse/CONFSERVER-79476", "refsource": "MISC"}, {"url": "https://jira.atlassian.com/browse/CWD-5815", "name": "https://jira.atlassian.com/browse/CWD-5815", "refsource": "MISC"}, {"url": "https://jira.atlassian.com/browse/FE-7410", "name": "https://jira.atlassian.com/browse/FE-7410", "refsource": "MISC"}, {"url": "https://jira.atlassian.com/browse/CRUC-8541", "name": "https://jira.atlassian.com/browse/CRUC-8541", "refsource": "MISC"}, {"url": "https://jira.atlassian.com/browse/JRASERVER-73897", "name": "https://jira.atlassian.com/browse/JRASERVER-73897", "refsource": "MISC"}, {"url": "https://jira.atlassian.com/browse/JSDSERVER-11863", "name": "https://jira.atlassian.com/browse/JSDSERVER-11863", "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The impact depends on which filters are used by each app, and how the filters are used. This vulnerability can result in authentication bypass and cross-site scripting. Atlassian has released updates that fix the root cause of this vulnerability, but has not exhaustively enumerated all potential consequences of this vulnerability. Atlassian Bamboo versions are affected before 8.0.9, from 8.1.0 before 8.1.8, and from 8.2.0 before 8.2.4. Atlassian Bitbucket versions are affected before 7.6.16, from 7.7.0 before 7.17.8, from 7.18.0 before 7.19.5, from 7.20.0 before 7.20.2, from 7.21.0 before 7.21.2, and versions 8.0.0 and 8.1.0. Atlassian Confluence versions are affected before 7.4.17, from 7.5.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and version 7.21.0. Atlassian Crowd versions are affected before 4.3.8, from 4.4.0 before 4.4.2, and version 5.0.0. Atlassian Fisheye and Crucible versions before 4.8.10 are affected. Atlassian Jira versions are affected before 8.13.22, from 8.14.0 before 8.20.10, and from 8.21.0 before 8.22.4. Atlassian Jira Service Management versions are affected before 4.13.22, from 4.14.0 before 4.20.10, and from 4.21.0 before 4.22.4."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Incorrect Behavior Order: Validate Before Canonicalize (CWE-180)."}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2022-26136", "STATE": "PUBLIC", "ASSIGNER": "security@atlassian.com", "DATE_PUBLIC": "2022-07-20T00:00:00"}}}}, "cveMetadata": {"cveId": "CVE-2022-26136", "state": "PUBLISHED", "dateUpdated": "2024-10-03T16:43:16.268Z", "dateReserved": "2022-02-25T00:00:00", "assignerOrgId": "f08a6ab8-ed46-4c22-8884-d911ccfe3c66", "datePublished": "2022-07-20T17:25:18.803466Z", "assignerShortName": "atlassian"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://jira.atlassian.com/browse/BAM-21795 (string)

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

}

1 : { »

url : https://jira.atlassian.com/browse/BSERV-13370 (string)

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

}

2 : { »

url : https://jira.atlassian.com/browse/CONFSERVER-79476 (string)

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

}

3 : { »

url : https://jira.atlassian.com/browse/CWD-5815 (string)

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

}

4 : { »

url : https://jira.atlassian.com/browse/FE-7410 (string)

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

}

5 : { »

url : https://jira.atlassian.com/browse/CRUC-8541 (string)

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

}

6 : { »

url : https://jira.atlassian.com/browse/JRASERVER-73897 (string)

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

}

7 : { »

url : https://jira.atlassian.com/browse/JSDSERVER-11863 (string)

tags : [ »

0 : x_refsource_MISC (string)

1 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-03T04:56:37.592Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 9.8 (number)

attackVector : NETWORK (string)

baseSeverity : CRITICAL (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : HIGH (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2022-26136 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : yes (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-10-03T15:26:49.090400Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:* (string)

]

vendor : atlassian (string)

product : bamboo (string)

versions : [ »

0 : { »

status : affected (string)

version : 7.2.0 (string)

lessThan : 7.2.10 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 8.0.0 (string)

lessThan : 8.0.9 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 8.1.0 (string)

lessThan : 8.1.8 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 8.2.0 (string)

lessThan : 8.2.4 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:* (string)

]

vendor : atlassian (string)

product : bitbucket (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 7.6.16 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 7.7.0 (string)

lessThan : 7.17.8 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 7.18.0 (string)

lessThan : 7.19.5 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 7.20.0 (string)

lessThan : 7.20.2 (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : 7.21.0 (string)

lessThan : 7.21.2 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

2 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:bitbucket:8.0.0:*:*:*:*:*:*:* (string)

1 : cpe:2.3:a:atlassian:bitbucket:8.1.0:*:*:*:*:*:*:* (string)

]

vendor : atlassian (string)

product : bitbucket (string)

versions : [ »

0 : { »

status : affected (string)

version : 8.0.0 (string)

}

1 : { »

status : affected (string)

version : 8.1.0 (string)

}

]

defaultStatus : unknown (string)

}

3 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:* (string)

]

vendor : atlassian (string)

product : confluence_data_center (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 7.4.17 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 7.5.0 (string)

lessThan : 7.13.7 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 7.14.0 (string)

lessThan : 7.14.3 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 7.15.0 (string)

lessThan : 7.15.2 (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : 7.16.0 (string)

lessThan : 7.16.4 (string)

versionType : custom (string)

}

5 : { »

status : affected (string)

version : 7.17.0 (string)

lessThan : 7.17.4 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

4 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:confluence_data_center:7.18.0:*:*:*:*:*:*:* (string)

]

vendor : atlassian (string)

product : confluence_data_center (string)

versions : [ »

0 : { »

status : affected (string)

version : 7.18.0 (string)

}

]

defaultStatus : unknown (string)

}

5 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:* (string)

]

vendor : atlassian (string)

product : confluence_server (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 7.4.17 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 7.5.0 (string)

lessThan : 7.13.7 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 7.14.0 (string)

lessThan : 7.14.3 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 7.15.0 (string)

lessThan : 7.15.2 (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : 7.16.0 (string)

lessThan : 7.16.4 (string)

versionType : custom (string)

}

5 : { »

status : affected (string)

version : 7.17.0 (string)

lessThan : 7.17.4 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

6 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:confluence_server:7.18.0:*:*:*:*:*:*:* (string)

]

vendor : atlassian (string)

product : confluence_server (string)

versions : [ »

0 : { »

status : affected (string)

version : 7.18.0 (string)

}

]

defaultStatus : unknown (string)

}

7 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:* (string)

]

vendor : atlassian (string)

product : crowd (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 4.3.8 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 4.4.0 (string)

lessThan : 4.4.2 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

8 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:crowd:5.0.0:*:*:*:*:*:*:* (string)

]

vendor : atlassian (string)

product : crowd (string)

versions : [ »

0 : { »

status : affected (string)

version : 5.0.0 (string)

}

]

defaultStatus : unknown (string)

}

9 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:* (string)

]

vendor : atlassian (string)

product : crucible (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 4.8.10 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

10 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:* (string)

]

vendor : atlassian (string)

product : fisheye (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 4.8.10 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

11 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:* (string)

]

vendor : atlassian (string)

product : jira_data_center (string)

versions : [ »

0 : { »

status : affected (string)

version : 8.13.0 (string)

lessThan : 8.13.22 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 8.14.0 (string)

lessThan : 8.20.10 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 8.21.0 (string)

lessThan : 8.22.4 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

12 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:* (string)

]

vendor : atlassian (string)

product : jira_server (string)

versions : [ »

0 : { »

status : affected (string)

version : 8.13.0 (string)

lessThan : 8.13.22 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 8.14.0 (string)

lessThan : 8.20.10 (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 8.21.0 (string)

lessThan : 8.22.4 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

13 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:jira_service_desk:-:*:*:*:server:*:*:* (string)

]

vendor : atlassian (string)

product : jira_service_desk (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 4.13.22 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

14 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:jira_service_desk:-:*:*:*:data_center:*:*:* (string)

]

vendor : atlassian (string)

product : jira_service_desk (string)

versions : [ »

0 : { »

status : affected (string)

version : 0 (string)

lessThan : 4.13.22 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

15 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:* (string)

]

vendor : atlassian (string)

product : jira_service_management (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.14.0 (string)

lessThan : 4.20.10 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 4.21.0 (string)

lessThan : 4.22.4 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

16 : { »

cpes : [ »

0 : cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:* (string)

]

vendor : atlassian (string)

product : jira_service_management (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.14.0 (string)

lessThan : 4.20.10 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 4.21.0 (string)

lessThan : 4.22.4 (string)

versionType : custom (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-03T15:54:32.628Z (string)

}

]

cna : { »

affected : [ »

0 : { »

vendor : Atlassian (string)

product : Bamboo Server (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.0.9 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 8.1.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.1.8 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 8.2.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.2.4 (string)

versionType : custom (string)

}

]

}

1 : { »

vendor : Atlassian (string)

product : Bamboo Data Center (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.0.9 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 8.1.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.1.8 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 8.2.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.2.4 (string)

versionType : custom (string)

}

]

}

2 : { »

vendor : Atlassian (string)

product : Bitbucket Server (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.6.16 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 7.7.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 7.16.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.17.8 (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : 7.18.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

5 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.19.5 (string)

versionType : custom (string)

}

6 : { »

status : affected (string)

version : 7.20.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

7 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.20.2 (string)

versionType : custom (string)

}

8 : { »

status : affected (string)

version : 7.21.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

9 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.21.2 (string)

versionType : custom (string)

}

10 : { »

status : affected (string)

version : 8.0.0 (string)

}

11 : { »

status : affected (string)

version : 8.1.0 (string)

}

]

}

3 : { »

vendor : Atlassian (string)

product : Bitbucket Data Center (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.6.16 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 7.7.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : 7.16.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.17.8 (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : 7.18.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

5 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.19.5 (string)

versionType : custom (string)

}

6 : { »

status : affected (string)

version : 7.20.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

7 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.20.2 (string)

versionType : custom (string)

}

8 : { »

status : affected (string)

version : 7.21.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

9 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.21.2 (string)

versionType : custom (string)

}

10 : { »

status : affected (string)

version : 8.0.0 (string)

}

11 : { »

status : affected (string)

version : 8.1.0 (string)

}

]

}

4 : { »

vendor : Atlassian (string)

product : Confluence Server (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.4.17 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 7.5.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.13.7 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 7.14.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.14.3 (string)

versionType : custom (string)

}

5 : { »

status : affected (string)

version : 7.15.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

6 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.15.2 (string)

versionType : custom (string)

}

7 : { »

status : affected (string)

version : 7.16.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

8 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.16.4 (string)

versionType : custom (string)

}

9 : { »

status : affected (string)

version : 7.17.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

10 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.17.4 (string)

versionType : custom (string)

}

11 : { »

status : affected (string)

version : 7.18.0 (string)

}

]

}

5 : { »

vendor : Atlassian (string)

product : Confluence Data Center (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.4.17 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 7.5.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.13.7 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 7.14.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.14.3 (string)

versionType : custom (string)

}

5 : { »

status : affected (string)

version : 7.15.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

6 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.15.2 (string)

versionType : custom (string)

}

7 : { »

status : affected (string)

version : 7.16.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

8 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.16.4 (string)

versionType : custom (string)

}

9 : { »

status : affected (string)

version : 7.17.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

10 : { »

status : affected (string)

version : unspecified (string)

lessThan : 7.17.4 (string)

versionType : custom (string)

}

11 : { »

status : affected (string)

version : 7.18.0 (string)

}

]

}

6 : { »

vendor : Atlassian (string)

product : Crowd Server (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 4.3.8 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 4.4.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : unspecified (string)

lessThan : 4.4.2 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 5.0.0 (string)

}

]

}

7 : { »

vendor : Atlassian (string)

product : Crowd Data Center (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 4.3.8 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 4.4.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : unspecified (string)

lessThan : 4.4.2 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 5.0.0 (string)

}

]

}

8 : { »

vendor : Atlassian (string)

product : Crucible (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 4.8.10 (string)

versionType : custom (string)

}

]

}

9 : { »

vendor : Atlassian (string)

product : Fisheye (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 4.8.10 (string)

versionType : custom (string)

}

]

}

10 : { »

vendor : Atlassian (string)

product : Jira Core Server (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.13.22 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 8.14.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.20.10 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 8.21.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.22.4 (string)

versionType : custom (string)

}

]

}

11 : { »

vendor : Atlassian (string)

product : Jira Software Server (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.13.22 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 8.14.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.20.10 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 8.21.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.22.4 (string)

versionType : custom (string)

}

]

}

12 : { »

vendor : Atlassian (string)

product : Jira Software Data Center (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.13.22 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 8.14.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.20.10 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 8.21.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : unspecified (string)

lessThan : 8.22.4 (string)

versionType : custom (string)

}

]

}

13 : { »

vendor : Atlassian (string)

product : Jira Service Management Server (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 4.13.22 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 4.14.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : unspecified (string)

lessThan : 4.20.10 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 4.21.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : unspecified (string)

lessThan : 4.22.4 (string)

versionType : custom (string)

}

]

}

14 : { »

vendor : Atlassian (string)

product : Jira Service Management Data Center (string)

versions : [ »

0 : { »

status : affected (string)

version : unspecified (string)

lessThan : 4.13.22 (string)

versionType : custom (string)

}

1 : { »

status : affected (string)

version : 4.14.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

2 : { »

status : affected (string)

version : unspecified (string)

lessThan : 4.20.10 (string)

versionType : custom (string)

}

3 : { »

status : affected (string)

version : 4.21.0 (string)

lessThan : unspecified (string)

versionType : custom (string)

}

4 : { »

status : affected (string)

version : unspecified (string)

lessThan : 4.22.4 (string)

versionType : custom (string)

}

]

}

]

datePublic : 2022-07-20T00:00:00 (string)

references : [ »

0 : { »

url : https://jira.atlassian.com/browse/BAM-21795 (string)

tags : [ »

0 : x_refsource_MISC (string)

]

}

1 : { »

url : https://jira.atlassian.com/browse/BSERV-13370 (string)

tags : [ »

0 : x_refsource_MISC (string)

]

}

2 : { »

url : https://jira.atlassian.com/browse/CONFSERVER-79476 (string)

tags : [ »

0 : x_refsource_MISC (string)

]

}

3 : { »

url : https://jira.atlassian.com/browse/CWD-5815 (string)

tags : [ »

0 : x_refsource_MISC (string)

]

}

4 : { »

url : https://jira.atlassian.com/browse/FE-7410 (string)

tags : [ »

0 : x_refsource_MISC (string)

]

}

5 : { »

url : https://jira.atlassian.com/browse/CRUC-8541 (string)

tags : [ »

0 : x_refsource_MISC (string)

]

}

6 : { »

url : https://jira.atlassian.com/browse/JRASERVER-73897 (string)

tags : [ »

0 : x_refsource_MISC (string)

]

}

7 : { »

url : https://jira.atlassian.com/browse/JSDSERVER-11863 (string)

tags : [ »

0 : x_refsource_MISC (string)

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-180 (string)

description : Incorrect Behavior Order: Validate Before Canonicalize (CWE-180). (string)

}

]

}

]

providerMetadata : { »

orgId : f08a6ab8-ed46-4c22-8884-d911ccfe3c66 (string)

shortName : atlassian (string)

dateUpdated : 2022-07-20T17:25:18 (string)

}

x_legacyV4Record : { »

affects : { »

vendor : { »

vendor_data : [ »

0 : { »

product : { »

product_data : [ »

0 : { »

version : { »

version_data : [ »

0 : { »

version_value : 8.0.9 (string)

version_affected : < (string)

}

1 : { »

version_value : 8.1.0 (string)

version_affected : >= (string)

}

2 : { »

version_value : 8.1.8 (string)

version_affected : < (string)

}

3 : { »

version_value : 8.2.0 (string)

version_affected : >= (string)

}

4 : { »

version_value : 8.2.4 (string)

version_affected : < (string)

}

]

}

product_name : Bamboo Server (string)

}

1 : { »

version : { »

version_data : [ »

0 : { »

version_value : 8.0.9 (string)

version_affected : < (string)

}

1 : { »

version_value : 8.1.0 (string)

version_affected : >= (string)

}

2 : { »

version_value : 8.1.8 (string)

version_affected : < (string)

}

3 : { »

version_value : 8.2.0 (string)

version_affected : >= (string)

}

4 : { »

version_value : 8.2.4 (string)

version_affected : < (string)

}

]

}

product_name : Bamboo Data Center (string)

}

2 : { »

version : { »

version_data : [ »

0 : { »

version_value : 7.6.16 (string)

version_affected : < (string)

}

1 : { »

version_value : 7.7.0 (string)

version_affected : >= (string)

}

2 : { »

version_value : 7.16.0 (string)

version_affected : >= (string)

}

3 : { »

version_value : 7.17.8 (string)

version_affected : < (string)

}

4 : { »

version_value : 7.18.0 (string)

version_affected : >= (string)

}

5 : { »

version_value : 7.19.5 (string)

version_affected : < (string)

}

6 : { »

version_value : 7.20.0 (string)

version_affected : >= (string)

}

7 : { »

version_value : 7.20.2 (string)

version_affected : < (string)

}

8 : { »

version_value : 7.21.0 (string)

version_affected : >= (string)

}

9 : { »

version_value : 7.21.2 (string)

version_affected : < (string)

}

10 : { »

version_value : 8.0.0 (string)

version_affected : = (string)

}

11 : { »

version_value : 8.1.0 (string)

version_affected : = (string)

}

]

}

product_name : Bitbucket Server (string)

}

3 : { »

version : { »

version_data : [ »

0 : { »

version_value : 7.6.16 (string)

version_affected : < (string)

}

1 : { »

version_value : 7.7.0 (string)

version_affected : >= (string)

}

2 : { »

version_value : 7.16.0 (string)

version_affected : >= (string)

}

3 : { »

version_value : 7.17.8 (string)

version_affected : < (string)

}

4 : { »

version_value : 7.18.0 (string)

version_affected : >= (string)

}

5 : { »

version_value : 7.19.5 (string)

version_affected : < (string)

}

6 : { »

version_value : 7.20.0 (string)

version_affected : >= (string)

}

7 : { »

version_value : 7.20.2 (string)

version_affected : < (string)

}

8 : { »

version_value : 7.21.0 (string)

version_affected : >= (string)

}

9 : { »

version_value : 7.21.2 (string)

version_affected : < (string)

}

10 : { »

version_value : 8.0.0 (string)

version_affected : = (string)

}

11 : { »

version_value : 8.1.0 (string)

version_affected : = (string)

}

]

}

product_name : Bitbucket Data Center (string)

}

4 : { »

version : { »

version_data : [ »

0 : { »

version_value : 7.4.17 (string)

version_affected : < (string)

}

1 : { »

version_value : 7.5.0 (string)

version_affected : >= (string)

}

2 : { »

version_value : 7.13.7 (string)

version_affected : < (string)

}

3 : { »

version_value : 7.14.0 (string)

version_affected : >= (string)

}

4 : { »

version_value : 7.14.3 (string)

version_affected : < (string)

}

5 : { »

version_value : 7.15.0 (string)

version_affected : >= (string)

}

6 : { »

version_value : 7.15.2 (string)

version_affected : < (string)

}

7 : { »

version_value : 7.16.0 (string)

version_affected : >= (string)

}

8 : { »

version_value : 7.16.4 (string)

version_affected : < (string)

}

9 : { »

version_value : 7.17.0 (string)

version_affected : >= (string)

}

10 : { »

version_value : 7.17.4 (string)

version_affected : < (string)

}

11 : { »

version_value : 7.18.0 (string)

version_affected : = (string)

}

]

}

product_name : Confluence Server (string)

}

5 : { »

version : { »

version_data : [ »

0 : { »

version_value : 7.4.17 (string)

version_affected : < (string)

}

1 : { »

version_value : 7.5.0 (string)

version_affected : >= (string)

}

2 : { »

version_value : 7.13.7 (string)

version_affected : < (string)

}

3 : { »

version_value : 7.14.0 (string)

version_affected : >= (string)

}

4 : { »

version_value : 7.14.3 (string)

version_affected : < (string)

}

5 : { »

version_value : 7.15.0 (string)

version_affected : >= (string)

}

6 : { »

version_value : 7.15.2 (string)

version_affected : < (string)

}

7 : { »

version_value : 7.16.0 (string)

version_affected : >= (string)

}

8 : { »

version_value : 7.16.4 (string)

version_affected : < (string)

}

9 : { »

version_value : 7.17.0 (string)

version_affected : >= (string)

}

10 : { »

version_value : 7.17.4 (string)

version_affected : < (string)

}

11 : { »

version_value : 7.18.0 (string)

version_affected : = (string)

}

]

}

product_name : Confluence Data Center (string)

}

6 : { »

version : { »

version_data : [ »

0 : { »

version_value : 4.3.8 (string)

version_affected : < (string)

}

1 : { »

version_value : 4.4.0 (string)

version_affected : >= (string)

}

2 : { »

version_value : 4.4.2 (string)

version_affected : < (string)

}

3 : { »

version_value : 5.0.0 (string)

version_affected : = (string)

}

]

}

product_name : Crowd Server (string)

}

7 : { »

version : { »

version_data : [ »

0 : { »

version_value : 4.3.8 (string)

version_affected : < (string)

}

1 : { »

version_value : 4.4.0 (string)

version_affected : >= (string)

}

2 : { »

version_value : 4.4.2 (string)

version_affected : < (string)

}

3 : { »

version_value : 5.0.0 (string)

version_affected : = (string)

}

]

}

product_name : Crowd Data Center (string)

}

8 : { »

version : { »

version_data : [ »

0 : { »

version_value : 4.8.10 (string)

version_affected : < (string)

}

]

}

product_name : Crucible (string)

}

9 : { »

version : { »

version_data : [ »

0 : { »

version_value : 4.8.10 (string)

version_affected : < (string)

}

]

}

product_name : Fisheye (string)

}

10 : { »

version : { »

version_data : [ »

0 : { »

version_value : 8.13.22 (string)

version_affected : < (string)

}

1 : { »

version_value : 8.14.0 (string)

version_affected : >= (string)

}

2 : { »

version_value : 8.20.10 (string)

version_affected : < (string)

}

3 : { »

version_value : 8.21.0 (string)

version_affected : >= (string)

}

4 : { »

version_value : 8.22.4 (string)

version_affected : < (string)

}

]

}

product_name : Jira Core Server (string)

}

11 : { »

version : { »

version_data : [ »

0 : { »

version_value : 8.13.22 (string)

version_affected : < (string)

}

1 : { »

version_value : 8.14.0 (string)

version_affected : >= (string)

}

2 : { »

version_value : 8.20.10 (string)

version_affected : < (string)

}

3 : { »

version_value : 8.21.0 (string)

version_affected : >= (string)

}

4 : { »

version_value : 8.22.4 (string)

version_affected : < (string)

}

]

}

product_name : Jira Software Server (string)

}

12 : { »

version : { »

version_data : [ »

0 : { »

version_value : 8.13.22 (string)

version_affected : < (string)

}

1 : { »

version_value : 8.14.0 (string)

version_affected : >= (string)

}

2 : { »

version_value : 8.20.10 (string)

version_affected : < (string)

}

3 : { »

version_value : 8.21.0 (string)

version_affected : >= (string)

}

4 : { »

version_value : 8.22.4 (string)

version_affected : < (string)

}

]

}

product_name : Jira Software Data Center (string)

}

13 : { »

version : { »

version_data : [ »

0 : { »

version_value : 4.13.22 (string)

version_affected : < (string)

}

1 : { »

version_value : 4.14.0 (string)

version_affected : >= (string)

}

2 : { »

version_value : 4.20.10 (string)

version_affected : < (string)

}

3 : { »

version_value : 4.21.0 (string)

version_affected : >= (string)

}

4 : { »

version_value : 4.22.4 (string)

version_affected : < (string)

}

]

}

product_name : Jira Service Management Server (string)

}

14 : { »

version : { »

version_data : [ »

0 : { »

version_value : 4.13.22 (string)

version_affected : < (string)

}

1 : { »

version_value : 4.14.0 (string)

version_affected : >= (string)

}

2 : { »

version_value : 4.20.10 (string)

version_affected : < (string)

}

3 : { »

version_value : 4.21.0 (string)

version_affected : >= (string)

}

4 : { »

version_value : 4.22.4 (string)

version_affected : < (string)

}

]

}

product_name : Jira Service Management Data Center (string)

}

]

}

vendor_name : Atlassian (string)

}

]

}

data_type : CVE (string)

references : { »

reference_data : [ »

0 : { »

url : https://jira.atlassian.com/browse/BAM-21795 (string)

name : https://jira.atlassian.com/browse/BAM-21795 (string)

refsource : MISC (string)

}

1 : { »

url : https://jira.atlassian.com/browse/BSERV-13370 (string)

name : https://jira.atlassian.com/browse/BSERV-13370 (string)

refsource : MISC (string)

}

2 : { »

url : https://jira.atlassian.com/browse/CONFSERVER-79476 (string)

name : https://jira.atlassian.com/browse/CONFSERVER-79476 (string)

refsource : MISC (string)

}

3 : { »

url : https://jira.atlassian.com/browse/CWD-5815 (string)

name : https://jira.atlassian.com/browse/CWD-5815 (string)

refsource : MISC (string)

}

4 : { »

url : https://jira.atlassian.com/browse/FE-7410 (string)

name : https://jira.atlassian.com/browse/FE-7410 (string)

refsource : MISC (string)

}

5 : { »

url : https://jira.atlassian.com/browse/CRUC-8541 (string)

name : https://jira.atlassian.com/browse/CRUC-8541 (string)

refsource : MISC (string)

}

6 : { »

url : https://jira.atlassian.com/browse/JRASERVER-73897 (string)

name : https://jira.atlassian.com/browse/JRASERVER-73897 (string)

refsource : MISC (string)

}

7 : { »

url : https://jira.atlassian.com/browse/JSDSERVER-11863 (string)

name : https://jira.atlassian.com/browse/JSDSERVER-11863 (string)

refsource : MISC (string)

}

]

}

data_format : MITRE (string)

description : { »

description_data : [ »

0 : { »

lang : eng (string)

}

]

}

problemtype : { »

problemtype_data : [ »

0 : { »

description : [ »

0 : { »

lang : eng (string)

value : Incorrect Behavior Order: Validate Before Canonicalize (CWE-180). (string)

}

]

}

]

}

data_version : 4.0 (string)

CVE_data_meta : { »

ID : CVE-2022-26136 (string)

STATE : PUBLIC (string)

ASSIGNER : security@atlassian.com (string)

DATE_PUBLIC : 2022-07-20T00:00:00 (string)

}

cveMetadata : { »

cveId : CVE-2022-26136 (string)

state : PUBLISHED (string)

dateUpdated : 2024-10-03T16:43:16.268Z (string)

dateReserved : 2022-02-25T00:00:00 (string)

assignerOrgId : f08a6ab8-ed46-4c22-8884-d911ccfe3c66 (string)

datePublished : 2022-07-20T17:25:18.803466Z (string)

assignerShortName : atlassian (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*", "matchCriteriaId": "218C960A-04C6-4242-BEBA-C81CF5F1F722", "versionEndExcluding": "7.2.10", "versionStartIncluding": "7.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*", "matchCriteriaId": "E360CDE0-FD1E-4337-8268-DB89CF605EE0", "versionEndExcluding": "8.0.9", "versionStartIncluding": "8.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*", "matchCriteriaId": "C0913EE0-2046-4E7E-966D-DC894E34D12B", "versionEndExcluding": "8.1.8", "versionStartIncluding": "8.1.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:*", "matchCriteriaId": "D182C1B1-A5FF-4777-9835-4E9114BB68DC", "versionEndExcluding": "8.2.4", "versionStartIncluding": "8.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*", "matchCriteriaId": "4DCD53E4-3169-4E8A-88D1-38BE51D09DD3", "versionEndExcluding": "7.6.16", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*", "matchCriteriaId": "9B878E40-95A7-40A7-9C52-6BC0C2FD3F54", "versionEndExcluding": "7.17.8", "versionStartIncluding": "7.7.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*", "matchCriteriaId": "46305D5A-7F7B-4A04-9DAD-E582D1193A7E", "versionEndExcluding": "7.19.5", "versionStartIncluding": "7.18.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*", "matchCriteriaId": "A96B135B-9272-457E-A557-6566554262D3", "versionEndExcluding": "7.20.2", "versionStartIncluding": "7.20.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:*", "matchCriteriaId": "62956861-BEDE-40C8-B628-C831087E7BDB", "versionEndExcluding": "7.21.2", "versionStartIncluding": "7.21.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:bitbucket:8.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "7A85565F-3F80-4E00-A706-AB4B2EAA4AFB", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:bitbucket:8.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "99E2E3C0-CDF0-4D79-80A6-85E71B947ED9", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*", "matchCriteriaId": "1C543CA6-8E8A-476C-AB27-614DF4EC68A5", "versionEndExcluding": "7.4.17", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*", "matchCriteriaId": "45FD913B-45DE-4CA8-9733-D62F54B19E74", "versionEndExcluding": "7.13.7", "versionStartIncluding": "7.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*", "matchCriteriaId": "12E753EB-0D31-448B-B8DE-0A95434CC97C", "versionEndExcluding": "7.14.3", "versionStartIncluding": "7.14.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*", "matchCriteriaId": "DE114494-74F0-454C-AAC4-8B8E5F1C67D0", "versionEndExcluding": "7.15.2", "versionStartIncluding": "7.15.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*", "matchCriteriaId": "90BB3572-29ED-415F-AD34-00EB76271F9C", "versionEndExcluding": "7.16.4", "versionStartIncluding": "7.16.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*", "matchCriteriaId": "30EF756A-B4E9-4E5D-BE6F-02CE95F12C9C", "versionEndExcluding": "7.17.4", "versionStartIncluding": "7.17.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:confluence_data_center:7.18.0:*:*:*:*:*:*:*", "matchCriteriaId": "A56B6A10-E23F-49EF-8C07-1AEDFCAE2788", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "AE8BE634-1599-4790-9410-6CA43BC60C4D", "versionEndExcluding": "7.4.17", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "52E68DFD-48F5-4949-AFEA-3829CA5DFC04", "versionEndExcluding": "7.13.7", "versionStartIncluding": "7.5.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "5DCDEC6C-4515-4CAA-9D82-7BF68A3AAE7E", "versionEndExcluding": "7.14.3", "versionStartIncluding": "7.14.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "B9948F94-DF67-4E3C-8CD4-417D57FBC60F", "versionEndExcluding": "7.15.2", "versionStartIncluding": "7.15.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "30E63ECB-85A8-4D41-A9B5-9FFF18D9CDB1", "versionEndExcluding": "7.16.4", "versionStartIncluding": "7.16.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "694171BD-FAE2-472C-8183-04BCA2F7B9A7", "versionEndExcluding": "7.17.4", "versionStartIncluding": "7.17.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:confluence_server:7.18.0:*:*:*:*:*:*:*", "matchCriteriaId": "0AC5E81B-DA4B-45E7-9584-4B576E49FD8B", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*", "matchCriteriaId": "EE028964-B3FC-4883-9967-68DE46EE7F6F", "versionEndExcluding": "4.3.8", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:*", "matchCriteriaId": "57DC9E2A-4C89-420D-9330-F11E56BF2F83", "versionEndExcluding": "4.4.2", "versionStartIncluding": "4.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:crowd:5.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "C50A718F-C67B-4462-BB7E-F80408DEF07D", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:*", "matchCriteriaId": "92329A2E-13E8-4818-85AB-3E7F479411EF", "versionEndExcluding": "4.8.10", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:*", "matchCriteriaId": "30DDE751-CA88-4CFB-9E60-4243851B4B53", "versionEndExcluding": "4.8.10", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*", "matchCriteriaId": "D91B8507-A7A7-4B74-9999-F1DEA9F487A9", "versionEndExcluding": "8.13.22", "versionStartIncluding": "8.13.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*", "matchCriteriaId": "963AE427-2897-42CB-AE11-654D700E690B", "versionEndExcluding": "8.20.10", "versionStartIncluding": "8.14.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*", "matchCriteriaId": "A7CD8891-BB97-4AD3-BEE4-6CCA0D8A2D85", "versionEndExcluding": "8.22.4", "versionStartIncluding": "8.21.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "E73A5202-6114-48E6-8F9B-C03B2E707055", "versionEndExcluding": "8.13.22", "versionStartIncluding": "8.13.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "D22AB11D-1D73-45DC-803C-146EFED18CDA", "versionEndExcluding": "8.20.10", "versionStartIncluding": "8.14.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*", "matchCriteriaId": "BB2091E9-0B14-4786-852F-454C56D20839", "versionEndExcluding": "8.22.4", "versionStartIncluding": "8.21.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:data_center:*:*:*", "matchCriteriaId": "1451C219-8AAA-4165-AE2C-033EF7B6F93A", "versionEndExcluding": "4.13.22", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:server:*:*:*", "matchCriteriaId": "BD23F987-0F14-4938-BB51-4EE61C24EB62", "versionEndExcluding": "4.13.22", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*", "matchCriteriaId": "39F77953-41D7-4398-9F07-2A057A993762", "versionEndExcluding": "4.20.10", "versionStartIncluding": "4.14.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:*", "matchCriteriaId": "CADBE0E7-36D9-4F6F-BEE6-A1E0B9428C2A", "versionEndExcluding": "4.20.10", "versionStartIncluding": "4.14.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*", "matchCriteriaId": "DC0DB08B-2034-4691-A7B2-3E5F8B6318B1", "versionEndExcluding": "4.22.4", "versionStartIncluding": "4.21.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:*", "matchCriteriaId": "97A17BE7-7CCC-46D8-A317-53E2B026DF6E", "versionEndExcluding": "4.22.4", "versionStartIncluding": "4.21.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in multiple Atlassian products allows a remote, unauthenticated attacker to bypass Servlet Filters used by first and third party apps. The impact depends on which filters are used by each app, and how the filters are used. This vulnerability can result in authentication bypass and cross-site scripting. Atlassian has released updates that fix the root cause of this vulnerability, but has not exhaustively enumerated all potential consequences of this vulnerability. Atlassian Bamboo versions are affected before 8.0.9, from 8.1.0 before 8.1.8, and from 8.2.0 before 8.2.4. Atlassian Bitbucket versions are affected before 7.6.16, from 7.7.0 before 7.17.8, from 7.18.0 before 7.19.5, from 7.20.0 before 7.20.2, from 7.21.0 before 7.21.2, and versions 8.0.0 and 8.1.0. Atlassian Confluence versions are affected before 7.4.17, from 7.5.0 before 7.13.7, from 7.14.0 before 7.14.3, from 7.15.0 before 7.15.2, from 7.16.0 before 7.16.4, from 7.17.0 before 7.17.4, and version 7.21.0. Atlassian Crowd versions are affected before 4.3.8, from 4.4.0 before 4.4.2, and version 5.0.0. Atlassian Fisheye and Crucible versions before 4.8.10 are affected. Atlassian Jira versions are affected before 8.13.22, from 8.14.0 before 8.20.10, and from 8.21.0 before 8.22.4. Atlassian Jira Service Management versions are affected before 4.13.22, from 4.14.0 before 4.20.10, and from 4.21.0 before 4.22.4."}, {"lang": "es", "value": "Una vulnerabilidad en varios productos de Atlassian permite a un atacante remoto no autenticado omitir los filtros Servlet usados por aplicaciones de primera y tercera parte. El impacto depende de los filtros usados por cada aplicaci\u00f3n y de c\u00f3mo son usados los filtros. Esta vulnerabilidad puede resultar en una omisi\u00f3n de la autenticaci\u00f3n y un ataque de tipo cross-site scripting. Atlassian ha publicado actualizaciones que corrigen la causa principal de esta vulnerabilidad, pero no ha enumerado exhaustivamente todas las consecuencias potenciales de esta vulnerabilidad. Est\u00e1n afectadas las versiones de Atlassian Bamboo anteriores a 8.0.9, desde 8.1.0 hasta  8.1.8, y desde la 8.2.0 hasta 8.2.4. Las versiones de Atlassian Bitbucket est\u00e1n afectadas anteriores a 7.6.16, desde la 7.7.0 anteriores a 7.17.8, desde la 7.18.0 anteriores a 7.19.5, desde la 7.20.0 anteriores a 7.20.2, desde la 7.21.0 anteriores a 7.21.2, y las versiones 8.0.0 y 8.1.0. Est\u00e1n afectadas las versiones de Atlassian Confluence anteriores a 7.4.17, desde la 7.5.0 anteriores a 7.13.7, desde la 7.14.0 anteriores a 7.14.3, desde la 7.15.0 anteriores a 7.15.2, desde la 7.16.0 anteriores a 7.16.4, desde la 7.17.0 anteriores a 7.17.4 y la versi\u00f3n 7.21.0. Est\u00e1n afectadas las versiones de Atlassian Crowd anteriores a 4.3.8, desde la 4.4.0 hasta 4.4.2, y la versi\u00f3n 5.0.0. Est\u00e1n afectadas las versiones de Atlassian Fisheye y Crucible anteriores a 4.8.10. Est\u00e1n afectadas las versiones de Atlassian Jira anteriores a 8.13.22, desde la 8.14.0 hasta 8.20.10, y desde la 8.21.0 hasta 8.22.4. Las versiones de Atlassian Jira Service Management est\u00e1n afectadas anteriores a 4.13.22, desde la 4.14.0 anteriores a 4.20.10, y desde la 4.21.0 anteriores a 4.22.4"}], "id": "CVE-2022-26136", "lastModified": "2024-11-21T06:53:30.297", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2022-07-20T18:15:08.487", "references": [{"source": "security@atlassian.com", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/BAM-21795"}, {"source": "security@atlassian.com", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/BSERV-13370"}, {"source": "security@atlassian.com", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/CONFSERVER-79476"}, {"source": "security@atlassian.com", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/CRUC-8541"}, {"source": "security@atlassian.com", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/CWD-5815"}, {"source": "security@atlassian.com", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/FE-7410"}, {"source": "security@atlassian.com", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/JRASERVER-73897"}, {"source": "security@atlassian.com", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/JSDSERVER-11863"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/BAM-21795"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/BSERV-13370"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/CONFSERVER-79476"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/CRUC-8541"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/CWD-5815"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/FE-7410"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/JRASERVER-73897"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Issue Tracking", "Patch", "Vendor Advisory"], "url": "https://jira.atlassian.com/browse/JSDSERVER-11863"}], "sourceIdentifier": "security@atlassian.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-180"}], "source": "security@atlassian.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-287"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 218C960A-04C6-4242-BEBA-C81CF5F1F722 (string)

versionEndExcluding : 7.2.10 (string)

versionStartIncluding : 7.2.0 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E360CDE0-FD1E-4337-8268-DB89CF605EE0 (string)

versionEndExcluding : 8.0.9 (string)

versionStartIncluding : 8.0.0 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:* (string)

matchCriteriaId : C0913EE0-2046-4E7E-966D-DC894E34D12B (string)

versionEndExcluding : 8.1.8 (string)

versionStartIncluding : 8.1.0 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:a:atlassian:bamboo:*:*:*:*:*:*:*:* (string)

matchCriteriaId : D182C1B1-A5FF-4777-9835-4E9114BB68DC (string)

versionEndExcluding : 8.2.4 (string)

versionStartIncluding : 8.2.0 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 4DCD53E4-3169-4E8A-88D1-38BE51D09DD3 (string)

versionEndExcluding : 7.6.16 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 9B878E40-95A7-40A7-9C52-6BC0C2FD3F54 (string)

versionEndExcluding : 7.17.8 (string)

versionStartIncluding : 7.7.0 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 46305D5A-7F7B-4A04-9DAD-E582D1193A7E (string)

versionEndExcluding : 7.19.5 (string)

versionStartIncluding : 7.18.0 (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A96B135B-9272-457E-A557-6566554262D3 (string)

versionEndExcluding : 7.20.2 (string)

versionStartIncluding : 7.20.0 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:a:atlassian:bitbucket:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 62956861-BEDE-40C8-B628-C831087E7BDB (string)

versionEndExcluding : 7.21.2 (string)

versionStartIncluding : 7.21.0 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:a:atlassian:bitbucket:8.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 7A85565F-3F80-4E00-A706-AB4B2EAA4AFB (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:a:atlassian:bitbucket:8.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 99E2E3C0-CDF0-4D79-80A6-85E71B947ED9 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 1C543CA6-8E8A-476C-AB27-614DF4EC68A5 (string)

versionEndExcluding : 7.4.17 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 45FD913B-45DE-4CA8-9733-D62F54B19E74 (string)

versionEndExcluding : 7.13.7 (string)

versionStartIncluding : 7.5.0 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 12E753EB-0D31-448B-B8DE-0A95434CC97C (string)

versionEndExcluding : 7.14.3 (string)

versionStartIncluding : 7.14.0 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:* (string)

matchCriteriaId : DE114494-74F0-454C-AAC4-8B8E5F1C67D0 (string)

versionEndExcluding : 7.15.2 (string)

versionStartIncluding : 7.15.0 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 90BB3572-29ED-415F-AD34-00EB76271F9C (string)

versionEndExcluding : 7.16.4 (string)

versionStartIncluding : 7.16.0 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 30EF756A-B4E9-4E5D-BE6F-02CE95F12C9C (string)

versionEndExcluding : 7.17.4 (string)

versionStartIncluding : 7.17.0 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:a:atlassian:confluence_data_center:7.18.0:*:*:*:*:*:*:* (string)

matchCriteriaId : A56B6A10-E23F-49EF-8C07-1AEDFCAE2788 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:* (string)

matchCriteriaId : AE8BE634-1599-4790-9410-6CA43BC60C4D (string)

versionEndExcluding : 7.4.17 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 52E68DFD-48F5-4949-AFEA-3829CA5DFC04 (string)

versionEndExcluding : 7.13.7 (string)

versionStartIncluding : 7.5.0 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 5DCDEC6C-4515-4CAA-9D82-7BF68A3AAE7E (string)

versionEndExcluding : 7.14.3 (string)

versionStartIncluding : 7.14.0 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:* (string)

matchCriteriaId : B9948F94-DF67-4E3C-8CD4-417D57FBC60F (string)

versionEndExcluding : 7.15.2 (string)

versionStartIncluding : 7.15.0 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 30E63ECB-85A8-4D41-A9B5-9FFF18D9CDB1 (string)

versionEndExcluding : 7.16.4 (string)

versionStartIncluding : 7.16.0 (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 694171BD-FAE2-472C-8183-04BCA2F7B9A7 (string)

versionEndExcluding : 7.17.4 (string)

versionStartIncluding : 7.17.0 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:a:atlassian:confluence_server:7.18.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 0AC5E81B-DA4B-45E7-9584-4B576E49FD8B (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:* (string)

matchCriteriaId : EE028964-B3FC-4883-9967-68DE46EE7F6F (string)

versionEndExcluding : 4.3.8 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:a:atlassian:crowd:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 57DC9E2A-4C89-420D-9330-F11E56BF2F83 (string)

versionEndExcluding : 4.4.2 (string)

versionStartIncluding : 4.4.0 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:a:atlassian:crowd:5.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : C50A718F-C67B-4462-BB7E-F80408DEF07D (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:a:atlassian:crucible:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 92329A2E-13E8-4818-85AB-3E7F479411EF (string)

versionEndExcluding : 4.8.10 (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:a:atlassian:fisheye:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 30DDE751-CA88-4CFB-9E60-4243851B4B53 (string)

versionEndExcluding : 4.8.10 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:* (string)

matchCriteriaId : D91B8507-A7A7-4B74-9999-F1DEA9F487A9 (string)

versionEndExcluding : 8.13.22 (string)

versionStartIncluding : 8.13.0 (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:* (string)

matchCriteriaId : 963AE427-2897-42CB-AE11-654D700E690B (string)

versionEndExcluding : 8.20.10 (string)

versionStartIncluding : 8.14.0 (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:* (string)

matchCriteriaId : A7CD8891-BB97-4AD3-BEE4-6CCA0D8A2D85 (string)

versionEndExcluding : 8.22.4 (string)

versionStartIncluding : 8.21.0 (string)

vulnerable : true (boolean)

}

33 : { »

criteria : cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:* (string)

matchCriteriaId : E73A5202-6114-48E6-8F9B-C03B2E707055 (string)

versionEndExcluding : 8.13.22 (string)

versionStartIncluding : 8.13.0 (string)

vulnerable : true (boolean)

}

34 : { »

criteria : cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:* (string)

matchCriteriaId : D22AB11D-1D73-45DC-803C-146EFED18CDA (string)

versionEndExcluding : 8.20.10 (string)

versionStartIncluding : 8.14.0 (string)

vulnerable : true (boolean)

}

35 : { »

criteria : cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:* (string)

matchCriteriaId : BB2091E9-0B14-4786-852F-454C56D20839 (string)

versionEndExcluding : 8.22.4 (string)

versionStartIncluding : 8.21.0 (string)

vulnerable : true (boolean)

}

36 : { »

criteria : cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:data_center:*:*:* (string)

matchCriteriaId : 1451C219-8AAA-4165-AE2C-033EF7B6F93A (string)

versionEndExcluding : 4.13.22 (string)

vulnerable : true (boolean)

}

37 : { »

criteria : cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:server:*:*:* (string)

matchCriteriaId : BD23F987-0F14-4938-BB51-4EE61C24EB62 (string)

versionEndExcluding : 4.13.22 (string)

vulnerable : true (boolean)

}

38 : { »

criteria : cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:* (string)

matchCriteriaId : 39F77953-41D7-4398-9F07-2A057A993762 (string)

versionEndExcluding : 4.20.10 (string)

versionStartIncluding : 4.14.0 (string)

vulnerable : true (boolean)

}

39 : { »

criteria : cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:* (string)

matchCriteriaId : CADBE0E7-36D9-4F6F-BEE6-A1E0B9428C2A (string)

versionEndExcluding : 4.20.10 (string)

versionStartIncluding : 4.14.0 (string)

vulnerable : true (boolean)

}

40 : { »

criteria : cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:* (string)

matchCriteriaId : DC0DB08B-2034-4691-A7B2-3E5F8B6318B1 (string)

versionEndExcluding : 4.22.4 (string)

versionStartIncluding : 4.21.0 (string)

vulnerable : true (boolean)

}

41 : { »

criteria : cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:* (string)

matchCriteriaId : 97A17BE7-7CCC-46D8-A317-53E2B026DF6E (string)

versionEndExcluding : 4.22.4 (string)

versionStartIncluding : 4.21.0 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

}

1 : { »

lang : es (string)

value : Una vulnerabilidad en varios productos de Atlassian permite a un atacante remoto no autenticado omitir los filtros Servlet usados por aplicaciones de primera y tercera parte. El impacto depende de los filtros usados por cada aplicación y de cómo son usados los filtros. Esta vulnerabilidad puede resultar en una omisión de la autenticación y un ataque de tipo cross-site scripting. Atlassian ha publicado actualizaciones que corrigen la causa principal de esta vulnerabilidad, pero no ha enumerado exhaustivamente todas las consecuencias potenciales de esta vulnerabilidad. Están afectadas las versiones de Atlassian Bamboo anteriores a 8.0.9, desde 8.1.0 hasta 8.1.8, y desde la 8.2.0 hasta 8.2.4. Las versiones de Atlassian Bitbucket están afectadas anteriores a 7.6.16, desde la 7.7.0 anteriores a 7.17.8, desde la 7.18.0 anteriores a 7.19.5, desde la 7.20.0 anteriores a 7.20.2, desde la 7.21.0 anteriores a 7.21.2, y las versiones 8.0.0 y 8.1.0. Están afectadas las versiones de Atlassian Confluence anteriores a 7.4.17, desde la 7.5.0 anteriores a 7.13.7, desde la 7.14.0 anteriores a 7.14.3, desde la 7.15.0 anteriores a 7.15.2, desde la 7.16.0 anteriores a 7.16.4, desde la 7.17.0 anteriores a 7.17.4 y la versión 7.21.0. Están afectadas las versiones de Atlassian Crowd anteriores a 4.3.8, desde la 4.4.0 hasta 4.4.2, y la versión 5.0.0. Están afectadas las versiones de Atlassian Fisheye y Crucible anteriores a 4.8.10. Están afectadas las versiones de Atlassian Jira anteriores a 8.13.22, desde la 8.14.0 hasta 8.20.10, y desde la 8.21.0 hasta 8.22.4. Las versiones de Atlassian Jira Service Management están afectadas anteriores a 4.13.22, desde la 4.14.0 anteriores a 4.20.10, y desde la 4.21.0 anteriores a 4.22.4 (string)

}

]

id : CVE-2022-26136 (string)

lastModified : 2024-11-21T06:53:30.297 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : HIGH (string)

baseScore : 9.8 (number)

baseSeverity : CRITICAL (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 5.9 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2022-07-20T18:15:08.487 (string)

references : [ »

0 : { »

source : security@atlassian.com (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/BAM-21795 (string)

}

1 : { »

source : security@atlassian.com (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/BSERV-13370 (string)

}

2 : { »

source : security@atlassian.com (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/CONFSERVER-79476 (string)

}

3 : { »

source : security@atlassian.com (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/CRUC-8541 (string)

}

4 : { »

source : security@atlassian.com (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/CWD-5815 (string)

}

5 : { »

source : security@atlassian.com (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/FE-7410 (string)

}

6 : { »

source : security@atlassian.com (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/JRASERVER-73897 (string)

}

7 : { »

source : security@atlassian.com (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/JSDSERVER-11863 (string)

}

8 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/BAM-21795 (string)

}

9 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/BSERV-13370 (string)

}

10 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/CONFSERVER-79476 (string)

}

11 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/CRUC-8541 (string)

}

12 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/CWD-5815 (string)

}

13 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/FE-7410 (string)

}

14 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/JRASERVER-73897 (string)

}

15 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Issue Tracking (string)

1 : Patch (string)

2 : Vendor Advisory (string)

]

url : https://jira.atlassian.com/browse/JSDSERVER-11863 (string)

}

]

sourceIdentifier : security@atlassian.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-180 (string)

}

]

source : security@atlassian.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-287 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable yes

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object