Description

The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability.

Remediation

References

CVE-2019-8449

Related Vulnerabilities

WordPress Plugin Video Gallery /w YouTube, Vimeo Multiple Vulnerabilities (8.80)

WordPress Plugin UpdraftPlus WordPress Backup Cross-Site Scripting (1.16.68)

Jboss EAP Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2019-9511)

WordPress Plugin Cookiebot-GDPR/CCPA Compliant Cookie Consent and Control Cross-Site Scripting (3.6.0)

Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-31018)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-306 CVE-2019-8449