← Back to browse · API

CVE-2022-0540

Severity
CRITICAL
CVSS
9.8
EPSS
0.88057
Risk score
70.02
CISA KEV
No
PoC
No
Published
2022-04-20
Modified
2024-10-24
First seen
2026-08-07
Aliases
EUVD-2022-15662, GHSA-H5CM-VC68-69H9
Products
Atlassian:Jira Software Data Center 8.21.0 <unspecified, Atlassian:Jira Service Management Server unspecified <4.20.6, Atlassian:Jira Software Server unspecified <8.22.0, Atlassian:Jira Software Data Center unspecified <8.20.6, Atlassian:Jira Core Server 8.14.0 <unspecified, Atlassian:Jira Software Server 8.21.0 <unspecified, Atlassian:Jira Software Server unspecified <8.13.18, Atlassian:Jira Service Management Data Center unspecified <4.13.18, Atlassian:Jira Service Management Data Center unspecified <4.20.6, Atlassian:Jira Software Data Center unspecified <8.22.0, Atlassian:Jira Service Management Server 4.14.0 <unspecified, Atlassian:Jira Software Data Center 8.14.0 <unspecified, Atlassian:Jira Software Server 8.14.0 <unspecified, Atlassian:Jira Software Data Center unspecified <8.13.18, Atlassian:Jira Core Server unspecified <8.13.18, Atlassian:Jira Service Management Server 4.21.0 <unspecified, Atlassian:Jira Core Server unspecified <8.20.6, Atlassian:Jira Service Management Server unspecified <4.22.0, Atlassian:Jira Service Management Data Center 4.14.0 <unspecified, Atlassian:Jira Software Server unspecified <8.20.6, Atlassian:Jira Service Management Data Center 4.21.0 <unspecified, Atlassian:Jira Service Management Data Center unspecified <4.22.0, Atlassian:Jira Core Server unspecified <8.22.0, Atlassian:Jira Service Management Server unspecified <4.13.18, Atlassian:Jira Core Server 8.21.0 <unspecified
Sources
euvd EUVD-2022-15662

Description

A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.

References