The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from version 8.6.0 prior to 8.13.4, and from version 8.14.0 prior to 8.15.1 allowed remote authenticated malicious users to obtain the full path of the Jira application data directory via an information disclosure vulnerability in the error message when presented with an invalid filename.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
atlassian data center |
||
atlassian jira data center |
||
atlassian jira |
||
atlassian jira server |