Description
The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom project avatars names via an Improper authorization vulnerability.
Remediation
References
Related Vulnerabilities
Joomla Other Vulnerability (CVE-2006-3481)
MySQL CVE-2023-22065 Vulnerability (CVE-2023-22065)
WordPress Plugin Classified Listing Pro & Directory Cross-Site Scripting (2.0.19)
Oracle Database Server Improper Access Control Vulnerability (CVE-2026-47060)
WordPress 'index.php' Cross-Site Scripting Vulnerability (1.5)