| Package | Affected versions | Patched versions |
|---|---|---|
| jira | < 8.8.0 | 8.8.0 |
| jira software data center | < 8.8.0 | 8.8.0 |
The way in which velocity templates were used in Atlassian Jira Server and Data Center prior to version 8.8.0 allowed remote attackers to gain remote code execution if they were able to exploit a server side template injection vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free