---
id: 7359
title: "CVE-2022-0540 - Authentication bypass in Seraph"
cve: CVE-2022-0540
source_domain: blog.viettelcybersecurity.com
source_url: "https://blog.viettelcybersecurity.com/cve-2022-0540-authentication-bypass-in-seraph/"
published_at: "2022-05-06T06:57:59Z"
tags: ["authentication-bypass", "jira", "atlassian", "vulnerability-analysis", "cve-2022-0540", "seraph"]
phying_url: "https://phying.com/item/7359"
lang: en
---

# CVE-2022-0540 - Authentication bypass in Seraph

## Summary

The author dissects CVE-2022-0540, the Jira auth bypass in Atlassian Seraph: role resolution derives from the request URI, and one semicolon defeats the mapping, exposing privileged actions.

## Intelligence Metadata

- **Sources:** blog.viettelcybersecurity.com
- **CVE:** CVE-2022-0540
- **Published:** 2022-05-06T06:57:59Z
- **Original:** https://blog.viettelcybersecurity.com/cve-2022-0540-authentication-bypass-in-seraph/
- **Phying News:** https://phying.com/item/7359