Description
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Information Disclosure vulnerability in the /rest/api/2/search endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version 8.14.0 before 8.15.1.
Remediation
References
Related Vulnerabilities
WordPress Plugin Compact WP Audio Player Multiple Vulnerabilities (1.9.6)
WordPress Plugin Watu Quiz Cross-Site Scripting (3.3.8.1)
WordPress Plugin Help Desk & Knowledgebase Software PHP Object Injection (1.3.11)
TYPO3 Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-34358)