Description

The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object.

Remediation

References

CVE-2017-5983

Related Vulnerabilities

WordPress Plugin Resize Image After Upload Cross-Site Request Forgery (1.8.5)

WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker Cross-Site Scripting (6.3.4)

WordPress Plugin Arigato Autoresponder and Newsletter Cross-Site Scripting (2.7.1.1)

WordPress Plugin Quiz and Survey Master (QSM)-Easy Quiz and Survey Maker SQL Injection (9.0.1)

WordPress Plugin AMP extensions Cross-Site Scripting (1.1)

Severity

Critical

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-502 CVE-2017-5983