Description

The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira project key exists or not via an information disclosure vulnerability.

Remediation

References

CVE-2019-20403

Related Vulnerabilities

WordPress Plugin Global Content Blocks Cross-Site Request Forgery (2.1.5)

Oracle JRE CVE-2013-1557 Vulnerability (CVE-2013-1557)

WordPress Plugin CM Footnotes Cross-Site Scripting (1.1.4)

Roundcube Cross-site Scripting (XSS) Vulnerability (CVE-2015-8793)

XWiki Improper Privilege Management Vulnerability (CVE-2023-26475)

Severity

Medium

Classification

CVE-2019-20403 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Tags

Missing Update Known Vulnerabilities