CVE-2020-14167
JIRA vulnerability analysis and mitigation

Overview

The MessageBundleResource resource in Jira Server and Data Center versions before 7.13.4, from 8.5.0 before 8.5.5, from 8.8.0 before 8.8.2, and from 8.9.0 before 8.9.1 contained a Denial of Service (DoS) vulnerability. The vulnerability was discovered and reported on June 16, 2020, and affected multiple versions of Atlassian's Jira product line (CVE Details, Atlassian Issue).

Technical details

The vulnerability exists in the MessageBundleResource component of Jira Server and Data Center, which could be exploited by remote attackers to impact the application's availability. The issue was classified as a Denial of Service vulnerability, affecting the system's availability (CVE Details).

Impact

When successfully exploited, this vulnerability allows remote attackers to impact the application's availability through a Denial of Service (DoS) attack, potentially causing system disruption and service unavailability (Atlassian Issue).

Exploitability

The vulnerability can be exploited by remote attackers targeting the MessageBundleResource component in affected versions of Jira Server and Data Center (CVE Details).

Mitigation and workarounds

Atlassian has released fixed versions to address this vulnerability: 7.13.14, 8.5.5, 8.8.2, 8.9.1, and 8.10.0. Users are advised to upgrade to these patched versions to mitigate the vulnerability (Atlassian Issue).

Additional resources


SourceThis report was generated using AI

Related JIRA vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2022-1471CRITICAL9.8
  • IBM Db2 logoIBM Db2
  • libdb-sql-debuginfo
NoYesDec 01, 2022
CVE-2025-22167HIGH8.7
  • JIRA logoJIRA
  • cpe:2.3:a:atlassian:jira
NoYesOct 22, 2025
CVE-2025-22157HIGH7.2
  • JIRA logoJIRA
  • cpe:2.3:a:atlassian:jira
NoYesMay 20, 2025
CVE-2022-36799HIGH7.2
  • JIRA logoJIRA
  • cpe:2.3:a:atlassian:jira
NoYesAug 01, 2022
CVE-2024-21685MEDIUM6.5
  • JIRA logoJIRA
  • cpe:2.3:a:atlassian:jira
NoYesJun 18, 2024

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management