Description
The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.
Remediation
References
Related Vulnerabilities
WordPress Comment Post Cross-Site Scripting Vulnerability (2.0)
Joomla Improper Input Validation Vulnerability (CVE-2015-8565)
Oracle Database Server CVE-2008-0339 Vulnerability (CVE-2008-0339)
Plone CMS Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-33510)
Django Weak Password Recovery Mechanism for Forgotten Password Vulnerability (CVE-2019-19844)