{"id":"CVE-2018-5231","url":"https://www.cyber-defence.io/tools/cve/CVE-2018-5231","generatedAt":"2026-10-29T01:41:52.510Z","title":"The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4 and from version 7.9.0 before version 7.9.2 allows remote attackers to perform a denial of service…","description":"The ForgotLoginDetails resource in Atlassian Jira before version 7.6.6, from version 7.7.0 before version 7.7.4, from version 7.8.0 before version 7.8.4 and from version 7.9.0 before version 7.9.2 allows remote attackers to perform a denial of service attack via sending requests to it.","published":"2018-05-16T13:29:01.000Z","lastModified":"2026-06-17T01:59:53.000Z","status":"Modified","sourceIdentifier":"security@atlassian.com","cvss":{"version":"3.0","score":7.5,"severity":"HIGH","vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H"},"cwe":[],"affected":["atlassian/jira","atlassian/jira server"],"epss":{"score":0.02656,"percentile":0.85589,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (2.66%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/104205","tags":["Third Party Advisory","VDB Entry"],"source":"security@atlassian.com"},{"url":"https://jira.atlassian.com/browse/JRASERVER-67290","tags":["Vendor Advisory"],"source":"security@atlassian.com"},{"url":"http://www.securityfocus.com/bid/104205","tags":["Third Party Advisory","VDB Entry"],"source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://jira.atlassian.com/browse/JRASERVER-67290","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2018-5231","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}