Description
The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for archived projects through a missing authorisation check.
Remediation
References
Related Vulnerabilities
SharePoint CVE-2021-40482 Vulnerability (CVE-2021-40482)
WordPress Plugin Elementor Pro Cross-Site Scripting (2.0.9)
PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-4721)
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.29)
Liferay DXP Uncontrolled Resource Consumption Vulnerability (CVE-2025-43796)