CVE-2022-0540

A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.

Affected

Atlassian · Jira Core Server · Jira Software Server · Jira Software Data Center · Jira Service Management Server · Jira Service Management Data Center

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

88.06% chance of exploitation in the next 30 days, 100th percentile

Nuclei

critical · CWE-287

Published

2022-04-20

Updated

2024-10-24

Proof-of-concept exploits (1)

• Pear1y/CVE-2022-0540-RCE71★ · 2022-05-25

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-0540.yaml

Exploit collections (1)

• CVE-2022-0540.yamlzan8in/afrog

Security advisories

• https://confluence.atlassian.com/display/JIRA/Jira+Security+Advisory+2022-04-20
• https://jira.atlassian.com/browse/JRASERVER-73650
• https://jira.atlassian.com/browse/JSDSERVER-11224

References

• CVE Record
• NVD entry

Related

• CVE-2022-26133