Description
Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File Replication settings via a Broken Access Control vulnerability in the `ReplicationSettings!default.jspa` endpoint. The affected versions are before version 8.6.0, from version 8.7.0 before 8.13.12, and from version 8.14.0 before 8.20.1.
Remediation
References
Related Vulnerabilities
WordPress 5.4.x Multiple Vulnerabilities (5.4 - 5.4.2)
e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-5084)
WordPress Plugin PDF Flipbook, 3D Flipbook WordPress-DearFlip Cross-Site Scripting (1.7.9)
Next.js Deserialization of Untrusted Data Vulnerability (CVE-2025-67779)
PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2009-3230)