Description
Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this may have allowed unauthorised attackers to determine if certain resources exist or not through an Information Disclosure vulnerability.
Remediation
References
Related Vulnerabilities
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2016-8610)
WordPress Plugin Post Grid Multiple Vulnerabilities (2.0.71)
Jboss EAP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2010-3878)
Oracle JRE Deserialization of Untrusted Data Vulnerability (CVE-2025-30761)
WordPress Plugin Advanced Contact form 7 DB SQL Injection (1.6.0)