CVE:CVE-2022-26135
CNNVD:CNNVD-202206-2858
Atlassian JIRA Server是澳大利亚Atlassian公司的一套缺陷跟踪管理系统的服务器版本。该系统主要用于对工作中各类问题、缺陷进行跟踪管理。
Atlassian Jira Server 存在安全漏洞。攻击者利用该漏洞通过批处理端点执行服务器端请求伪造攻击。
solution:Upgrade atlassian jira_data_center to a higher version than 8.13.22,8.20.10,8.22.4,and avoid the version [8.0.0,8.13.22),[8.14.0,8.20.10),[8.21.0,8.22.4); Upgrade atlassian jira_server to a higher version than 8.13.22,8.20.10,8.22.4,and avoid the version [8.0.0,8.13.22),[8.14.0,8.20.10),[8.21.0,8.22.4); Upgrade atlassian jira_service_desk to a higher version than 4.13.22,and avoid the version [4.0.0,4.13.22); Upgrade atlassian jira_service_management to a higher version than 4.20.10,4.22.4,and avoid the version [4.14.0,4.20.10),[4.21.0,4.22.4)