atlassian jira software data center vulnerabilities and exploits

(subscribe to this query)

4

CVSSv2

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have access to via an Insecure Direct Object References (IDOR) vulnerability. The affected versions are before version 8.5.10, and from version 8.6.0...

Atlassian Jira Atlassian Jira 8.13.3 Atlassian Jira Software Data Center Atlassian Jira Software Data Center 8.13.3

4

CVSSv2

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view titles of a private project via an Insecure Direct Object References (IDOR) vulnerability in the Administration Permission Helper. The affected versions are before version 7.13.6, from...

Atlassian Jira Atlassian Jira 8.10.0 Atlassian Jira Software Data Center Atlassian Jira Software Data Center 8.10.0

4

CVSSv2

Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, and 8.6.0 before version 8.6.1 allows remote attackers to make comments on a ticket to which they do not have commenting permissions via a broken access control...

Atlassian Jira Atlassian Jira 8.6.0 Atlassian Jira Software Data Center Atlassian Jira Software Data Center 8.6.0

4

CVSSv2

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to prevent users from accessing the instance via an Application Denial of Service vulnerability in the /rendering/wiki endpoint. The affected versions are before version 8.8.0....

Atlassian Jira Atlassian Jira Software Data Center

5

CVSSv2

Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this may have allowed unauthorised attackers to determine if certain resources exist or not through an Information Disclosure...

Atlassian Jira Atlassian Jira Software Data Center

3.5

CVSSv2

The file upload feature in Atlassian Jira Server and Data Center in affected versions allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability. The affected versions are before version 8.5.4, from version 8.6.0 before 8.6.2,...

Atlassian Jira Atlassian Jira Software Data Center

4

CVSSv2

Support zip files in Atlassian Jira Server and Data Center before version 8.6.0 could be downloaded by a System Administrator user without requiring the user to re-enter their password via an improper authorization vulnerability....

Atlassian Jira Atlassian Jira Software Data Center

4.3

CVSSv2

The JMX monitoring flag in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to turn the JMX monitoring flag off or on via a Cross-site request forgery (CSRF) vulnerability....

Atlassian Jira Atlassian Jira Software Data Center

5

CVSSv2

The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom project avatars names via an Improper authorization vulnerability....

Atlassian Jira Atlassian Jira Software Data Center

3.5

CVSSv2

The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by uploading a...

Atlassian Jira Atlassian Jira Software Data Center

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook