Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to access sensitive information without being authenticated in the Global permissions screen. The affected versions are before version 8.8.0.

Remediation

References

CVE-2019-20898

Related Vulnerabilities

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-67477)

Atlassian Confluence Server-Side Request Forgery (SSRF) Vulnerability (CVE-2019-3395)

WordPress Plugin Login with phone number Cross-Site Scripting (1.4.1)

PHP Other Vulnerability (CVE-2002-1954)

Oracle Database Server CVE-2006-5336 Vulnerability (CVE-2006-5336)

Severity

High

Tags

Missing Update Known Vulnerabilities CVE-2019-20898