| Package | Affected versions | Patched versions |
|---|---|---|
| jira | < 7.13.14 | 7.13.14 |
| jira data center | ≥ 8.5.0, < 8.5.5≥ 8.8.0, < 8.8.2≥ 8.9.0, < 8.9.1 | 8.5.58.8.28.9.1 |
| jira server | ≥ 8.5.0, < 8.5.5≥ 8.8.0, < 8.8.2≥ 8.9.0, < 8.9.1 | 8.5.58.8.28.9.1 |
| jira software data center | < 7.13.14 | 7.13.14 |
The MessageBundleResource resource in Jira Server and Data Center before version 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to impact the application's availability via an Denial of Service (DoS) vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free