6.8
CVSSv2

CVE-2008-6531

Published: 26/03/2009 Updated: 17/08/2017
CVSS v2 Base Score: 6.8 | Impact Score: 6.4 | Exploitability Score: 8.6
VMScore: 605
Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P

Vulnerability Summary

The WebWork 1 web application framework in Atlassian JIRA prior to 3.13.2 allows remote malicious users to invoke exposed public JIRA methods via a crafted URL that is dynamically transformed into method calls, aka "WebWork 1 Parameter Injection Hole."

Affected Products

Vendor Product Versions
AtlassianJira*, 2.1, 2.2, 2.2.1, 2.3, 2.4.1, 2.5.1, 2.5.2, 2.5.3, 2.6, 2.6.1, 3.0, 3.0.1, 3.0.2, 3.0.3, 3.1, 3.1.1, 3.2, 3.2.1, 3.2.2, 3.2.3, 3.3, 3.3.1, 3.3.2, 3.3.3, 3.4.1, 3.4.2, 3.4.3, 3.5, 3.5.1, 3.5.2, 3.5.3, 3.6, 3.6.1, 3.6.2, 3.6.3, 3.6.4, 3.6.5, 3.7, 3.7.1, 3.7.2, 3.7.3, 3.7.4, 3.8, 3.8.1, 3.9, 3.9.1, 3.9.2, 3.9.3, 3.10, 3.10.1, 3.10.2, 3.11, 3.12, 3.12.1, 3.12.2, 3.12.3, 3.13, 3.13.1