Description
The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira project key exists or not via an information disclosure vulnerability.
Remediation
References
Related Vulnerabilities
Drupal Core 4.6.x Mail Header Injection (4.6.0 - 4.6.5)
Apache Tomcat Other Vulnerability (CVE-2023-45648)
Chamilo URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2015-9540)
WordPress Plugin Rezgo Online Booking Cross-Site Scripting (4.1.7)
WordPress Plugin NewStatPress Multiple Vulnerabilities (1.0.4)