Evil-DB LogoEvil-DB
← All CVEs

CVE-2017-5983

critical · 9.8

A public exploit / detection template exists

Weaponised detection is publicly available, which meaningfully raises real-world risk regardless of CVSS. nuclei-templates →

The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object.

9.8
CVSS
16.4%
EPSS (exploit prob.)
97th
EPSS percentile
2017-04-10
Published

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-502

Affected products

VendorProductAffected versions
atlassianjira4.2.4
atlassianjira4.3
atlassianjira4.3.1
atlassianjira4.3.2
atlassianjira4.3.3
atlassianjira4.3.4
atlassianjira4.4
atlassianjira4.4.1
atlassianjira4.4.2
atlassianjira4.4.3
atlassianjira4.4.4
atlassianjira4.4.5
atlassianjira5.0
atlassianjira5.0.1
atlassianjira5.0.2
atlassianjira5.0.3
atlassianjira5.0.4
atlassianjira5.0.5
atlassianjira5.0.7
atlassianjira5.1
atlassianjira5.1.1
atlassianjira5.1.2
atlassianjira5.1.3
atlassianjira5.1.4
atlassianjira5.1.5
atlassianjira5.1.6
atlassianjira5.1.7
atlassianjira5.1.8
atlassianjira5.2
atlassianjira5.2.1
atlassianjira5.2.2
atlassianjira5.2.3
atlassianjira5.2.4
atlassianjira5.2.5
atlassianjira5.2.6
atlassianjira5.2.7
atlassianjira5.2.8
atlassianjira5.2.9
atlassianjira5.2.10
atlassianjira5.2.11

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2017-5983