Description
Versions before 8.9.1, Various resources in Jira responded with a 404 instead of redirecting unauthenticated users to the login page, in some situations this may have allowed unauthorised attackers to determine if certain resources exist or not through an Information Disclosure vulnerability.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2018-3259 Vulnerability (CVE-2018-3259)
MySQL Cryptographic Issues Vulnerability (CVE-2003-1480)
WordPress Plugin WordPress WP-Advanced-Search SQL Injection (3.3.5)
WordPress Plugin M-vSlider SQL Injection (2.1.3)
WordPress Plugin ARI Adminer-WordPress Database Manager Cross-Site Request Forgery (1.1.13)