Description

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira project key exists or not via an information disclosure vulnerability.

Remediation

References

CVE-2019-20403

Related Vulnerabilities

Apache HTTP Server Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-40438)

WordPress Plugin FavIcon Switcher Cross-Site Request Forgery (1.2.11)

WordPress Plugin Genesis Columns Advanced Cross-Site Scripting (2.0.3)

WordPress Plugin WP-SpamFree Anti-Spam 'id' Parameter SQL Injection (3.2.1)

Apache HTTP Server Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2068)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities CVE-2019-20403