atlassian jira comment vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

The execute function in in the Atlassian gajira-comment GitHub Action before version 2.0.2 allows remote malicious users to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue comment.

Atlassian Jira Comment

6.5

CVSSv3

Affected versions of Atlassian Jira Server and Data Center allow remote malicious users to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 prior to 7.13....

Atlassian Jira Atlassian Jira Server Atlassian Jira Software Data Center Atlassian Jira Data Center

4.3

CVSSv3

Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, and 8.6.0 before version 8.6.1 allows remote malicious users to make comments on a ticket to which they do not have commenting permissions via a broken access cont...

Atlassian Jira Atlassian Jira Server Atlassian Jira Server 8.6.0 Atlassian Jira Software Data Center Atlassian Jira Data Center Atlassian Jira Data Center 8.6.0

NA

Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA Enterprise Edition 3.13 allow remote malicious users to inject arbitrary web script or HTML via the (1) fullname (Full Name) parameter in the ViewProfile page or (2) returnUrl parameter in a form, as demonstrat...

Atlassian Jira 3.13

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook