Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to execute arbitrary code via a DLL hijacking vulnerability in Tomcat. The affected versions are before version 8.5.5, and from version 8.6.0 before 8.7.2.

Remediation

References

CVE-2019-20419

Related Vulnerabilities

WordPress Plugin All-in-One Event Calendar Multiple Vulnerabilities (1.9)

WordPress Plugin Shareaholic-share buttons, related posts, social analytics & more Cross-Site Request Forgery (7.0.3.3)

WordPress Plugin Affiliates Manager SQL Injection (2.8.6)

WordPress Plugin Duplicate Page SQL Injection (3.3)

WordPress Plugin Generate Child Theme Security Bypass (1.5.3)

Severity

High

Classification

CVE-2019-20419 CWE-427

Tags

Missing Update Known Vulnerabilities