• Type: Bug
• Resolution: Fixed
• Priority: High (View bug fix roadmap)
• Fix Version/s: 9.6.0, 9.5.1, 9.4.4, 8.20.21
• Affects Version/s: 9.0.0, 9.1.0, 9.2.0, 9.3.0, 9.4.0, 9.5.0, 8.20.18
• Component/s: Security
• Labels:

  • advisory
  • advisory-released
  • dont-import
  • security
  • 🔢✅

[JRASERVER-74771] Information Disclosure via QueryCompenentRenderer API

Bugfix Automation Bot made changes - 25/Feb/2025 11:30 AM

Introduced in Version

New: 8.2

Soner Sezgin made changes - 25/Feb/2025 10:53 AM

Symptom Severity		New: Severity 2 - Major [ 15831 ]
Workflow	Original: JAC Public Security Vulnerability Workflow v2 [ 4341798 ]	New: JAC Bug Workflow v3 [ 4510126 ]
Issue Type	Original: Public Security Vulnerability [ 10700 ]	New: Bug [ 1 ]
Status	Original: Published [ 12873 ]	New: Closed [ 6 ]

Kaili Gu made changes - 11/Sep/2023 5:52 AM

Link

New: This issue has a derivative of JRASERVER-76261 [ JRASERVER-76261 ]

Cathy S made changes - 25/May/2023 2:48 AM

Remote Link

New: This issue links to "Page (Confluence)" [ 765126 ]

Bruno made changes - 26/Apr/2023 11:00 PM

Description

Original: Affected versions of Atlassian Jira Server and Data Centre allowed an unauthenticated remote attacker to fetch Issue,Project and Sprint information via Information Disclosure Vulnerability via "/secure/QueryComponentRendererValue!Default.jspa" endpoint. *Affected versions:*  * version < 9.5.1 *Fixed versions:*  * 9.5.1  * 9.6.0

New: Affected versions of Atlassian Jira Server and Data Centre allowed an unauthenticated remote attacker to fetch Issue,Project and Sprint information via Information Disclosure Vulnerability via "/secure/QueryComponentRendererValue!Default.jspa" endpoint. *Affected versions:*  * version < 9.5.1 *Fixed versions:*  * 8.20.21 and newer  * 9.4.4 and newer  * 9.5.1 and newer  * 9.6.0 and newer

Ignat (Inactive) made changes - 05/Apr/2023 8:12 AM

Priority

Original: Low [ 4 ]

New: High [ 2 ]

Justin Evans made changes - 22/Mar/2023 6:31 PM

Remote Link

New: This issue links to "Page (Confluence)" [ 743173 ]

Zul NS [Atlassian] made changes - 21/Mar/2023 8:08 PM

Fix Version/s		New: 9.4.4 [ 104337 ]
Fix Version/s		New: 8.20.21 [ 104633 ]

Vedika Tambolkar made changes - 23/Feb/2023 3:22 PM

Affects Version/s

New: 8.20.18 [ 104592 ]

Mandeep Jadon made changes - 22/Feb/2023 12:37 PM

Assignee

Original: Mandeep Jadon [ ff48ea9431ea ]

Load more older history items