Description

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Information Disclosure vulnerability in the /rest/api/2/search endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version 8.14.0 before 8.15.1.

Remediation

References

CVE-2021-39122

Related Vulnerabilities

WordPress CVE-2020-25286 Vulnerability (CVE-2020-25286)

MODX Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2017-1000067)

XOOPS Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2008-0613)

Moodle Cleartext Storage of Sensitive Information Vulnerability (CVE-2024-43429)

WordPress Plugin WPFront Scroll Top Cross-Site Scripting (2.0.5.07184)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2021-39122