CVE-2022-0540

Published: Apr 20, 2022Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.

Affected (12)

Products: Atlassian: Jira Data Center, Jira Server, Jira Service Management

Atlassian

3 products

Jira Data Center

Jira Server

Jira Service Management

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Atlassian Jira Data Center	Before 8.13.8
Atlassian Jira Data Center	From 8.14.0 to 8.20.6
Atlassian Jira Data Center	From 8.21.0 to 8.22.0
Atlassian Jira Server	Before 8.13.8
Atlassian Jira Server	From 8.14.0 to 8.20.6
Atlassian Jira Server	From 8.21.0 to 8.22.0
Atlassian Jira Service Management	Before 4.13.18
Atlassian Jira Service Management	From 4.14.0 to 4.20.6
Atlassian Jira Service Management	From 4.21.0 to 4.22.0
Atlassian Jira Service Management	Before 4.13.8
Atlassian Jira Service Management	From 4.14.0 to 4.20.6
Atlassian Jira Service Management	From 4.21.0 to 4.22.0