Description
The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability.
Remediation
References
Related Vulnerabilities
MongoDb Reachable Assertion Vulnerability (CVE-2024-3374)
Microsoft SQL Server CVE-2023-32027 Vulnerability (CVE-2023-32027)
WordPress Plugin Hot Files:File Sharing and Download Manager Cross-Site Scripting (1.0.0)
Joomla! Core Multiple Cross-Site Scripting Vulnerabilities (1.5.0 - 3.8.7)
ProjectSend Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2023-53930)