CVE-2017-5983

—

CVSS 3.0

9.8 critical

EPSS

16%p97

Published

Apr 10, 2017 (Apr 10, 2017)

Modified

Jun 17, 2026

Description

The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object.

Vendors: atlassian
Products: jira
Weakness: CWE-502
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (16.4%)

In the news0 stories

No ingested article mentions this CVE yet.