CVE-2022-0540 in the critical feed json
A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP reque…
published 2022-04-20 4 y ago modified 2026-06-17 4 mo ago also EUVD-2022-15662
- cvss
- 9.8
- version 3.1, CNA
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 88.1%
- EPSS 88.1% chance of exploitation in 30 days, percentile 99.7%
- public exploits
- 0
- none known, plus a Nuclei check
Summary
A vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication by sending a specially crafted HTTP request. This affects Atlassian Jira Server and Data Center versions before 8.13.18, versions 8.14.0 and later before 8.20.6, and versions 8.21.0 and later before 8.22.0. This also affects Atlassian Jira Service Management Server and Data Center versions before 4.13.18, versions 4.14.0 and later before 4.20.6, and versions 4.21.0 and later before 4.22.0.
Patch / fix
- Atlassian Jira Core Server 8.13.18, 8.20.6, 8.22.0
- Atlassian Jira Software Server 8.13.18, 8.20.6, 8.22.0
- Atlassian Jira Software Data Center 8.13.18, 8.20.6, 8.22.0
- Atlassian Jira Service Management Server 4.13.18, 4.20.6, 4.22.0
- Atlassian Jira Service Management Data Center 4.13.18, 4.20.6, 4.22.0
- atlassian jira_data_center 8.13.18, 8.20.6, 8.22.0
- atlassian jira_server 8.13.18, 8.20.6, 8.22.0
- atlassian jira_service_management 4.13.18, 4.20.6, 4.22.0
CISA SSVC
- Exploitation
- none
- Automatable
- yes
- Technical impact
- total
- Assessed
- 2 y ago
Exploit prediction
88.06% chance of exploitation in the next 30 days, higher than 99.7% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- Nuclei template Atlassian Jira Seraph - Authentication Bypass nuclei detection template
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CISA ADP | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Affected products
- Atlassian Jira Core Server
- Atlassian Jira Software Server
- Atlassian Jira Software Data Center
- Atlassian Jira Service Management Server
- Atlassian Jira Service Management Data Center
- atlassian jira_data_center
- atlassian jira_server
- atlassian jira_service_management
Classification
- Weakness
-
- CWE-287 Improper Authentication
References
-
confluence.atlassian.com
/display/JIRA/Jira+Security+Advisory+2022-04-20
issue-tracking, patch, vendor-advisory
-
jira.atlassian.com
/browse/JRASERVER-73650
issue-tracking, patch, vendor-advisory
-
jira.atlassian.com
/browse/JSDSERVER-11224
issue-tracking, patch, vendor-advisory
Sources
- CVE List CVE-2022-0540
- NVD CVE-2022-0540
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.