atlassian jira server 8.13.3 vulnerabilities and exploits

(subscribe to this query)

Affected versions of Atlassian Jira Server and Data Center allow remote malicious users to view the metadata of boards they should not have access to via an Insecure Direct Object References (IDOR) vulnerability. The affected versions are before version 8.5.10, and from version 8...

Atlassian Jira Server Atlassian Jira Data Center Atlassian Jira Atlassian Jira Data Center 8.13.3 Atlassian Jira Server 8.13.3 Atlassian Jira Software Data Center

Affected versions of Atlassian Jira Server and Data Center allow remote malicious users to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the ViewWorkflowSchemes.jspa and ListWorkflows.jspa endpoints. The affected versions are before version...

Atlassian Jira Server Atlassian Jira Data Center Atlassian Jira Atlassian Jira Software Data Center

Affected versions of Atlassian Jira Server and Data Center allow remote malicious users to enumerate Jira projects via an Information Disclosure vulnerability in the Jira Projects plugin report page. The affected versions are before version 8.5.11, from version 8.6.0 prior to 8.1...

Atlassian Jira Server Atlassian Jira Data Center Atlassian Data Center Atlassian Jira

Affected versions of Atlassian Jira Server and Data Center allow remote malicious users to evade behind-the-firewall protection of app-linked resources via a Broken Authentication vulnerability in the `makeRequest` gadget resource. The affected versions are before version 8.13.3,...

Atlassian Jira Server Atlassian Jira Data Center Atlassian Data Center Atlassian Jira

Affected versions of Atlassian Jira Server and Data Center allow remote malicious users to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the Screens Modal view. The affected versions are before version 8.5.11, from version 8.6.0 prior to 8....

Atlassian Jira Server Atlassian Jira Data Center Atlassian Data Center Atlassian Jira

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote malicious users to download temporary files and enumerate project keys via an Information Disclosure vulnerability in the /rest/api/1.0/issues/{id}/ActionsAndOperations API endpoint. The affec...

Atlassian Jira Server Atlassian Jira Data Center Atlassian Data Center Atlassian Jira

The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 prior to 8.13.3, and from 8.14.0 prior to 8.15.0 allowed unauthenticated remote malicious users to read arbitrary files within WEB-INF and META-INF directories via a...

Atlassian Jira Server Atlassian Jira Data Center Atlassian Data Center

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote malicious users to view whitelist rules via a Broken Access Control vulnerability in the /rest/whitelist/<version>/check endpoint. The affected versions are before version 8.13.3, and from ver...

Atlassian Jira Data Center Atlassian Jira Server Atlassian Data Center Atlassian Data Center 8 Atlassian Jira Atlassian Jira 8

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook