Loading...

XML

Word

Printable

Details

Type: Public Security Vulnerability
Resolution: Fixed
Priority: High
Fix Version/s: 9.6.0, 9.5.1, 9.4.4, 8.20.21
Affects Version/s: 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 8.20.18
Component/s: Security
Labels:

CVSS Score:
7.5
CVSS Severity:
High

Description

Affected versions of Atlassian Jira Server and Data Centre allowed an unauthenticated remote attacker to fetch Issue,Project and Sprint information via Information Disclosure Vulnerability via "/secure/QueryComponentRendererValue!Default.jspa" endpoint.

Affected versions:

version < 9.5.1

Fixed versions:

8.20.21 and newer
9.4.4 and newer
9.5.1 and newer
9.6.0 and newer

Attachments

Issue Links

mentioned in: Page Loading...; Page Loading...; Page Loading...

Activity

People

Assignee:: Unassigned

Reporter:: Security Metrics Bot

Votes:: 0 Vote for this issue

Watchers:: 43 Start watching this issue

Dates

Created:: 03/Feb/2023 5:50 AM

Updated:: 23/Oct/2023 8:56 PM

Resolved:: 21/Feb/2023 9:42 AM