发布日期：2025-05-20
更新日期：2025-09-11

受影响系统：

Atlassian Jira Service Management Data Center and Server 5.12.0
Atlassian Jira Service Management Data Center and Server 10.5.0
Atlassian Jira Service Management Data Center and Server 10.4.0
Atlassian Jira Service Management Data Center and Server 10.3.0
Atlassian Jira Core Data Center and Server 9.12.0
Atlassian Jira Core Data Center and Server 10.5.0
Atlassian Jira Core Data Center and Server 10.4.0
Atlassian Jira Core Data Center and Server 10.3.0

描述：

---

CVE(CAN) ID: CVE-2025-22157

Atlassian Jira Core Data Center and Server和Atlassian Jira Service Management Data Center and Server都是澳大利亚Atlassian公司的产品。
Atlassian Jira Core Data Center and Server和Atlassian Jira Service Management Data Center and Server多个版本存在权限提升漏洞，该漏洞源于允许攻击者作为高权限用户执行操作，攻击者可利用该漏洞获取管理用户权限。

<*链接：https://confluence.atlassian.com/security/security-bulletin-may-20-2025-1561365992.html
*>

建议：

---

厂商补丁：

Atlassian
---------
目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：
https://confluence.atlassian.com/pages/viewpage.action?pageId=1561365992

浏览次数：40
严重程度：0（网友投票）