Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-69777
HistoryAug 09, 2019 - 3:23 a.m.

User enumeration through the issueTable resource - CVE-2019-8446

2019-08-0903:23:53
security-metrics-bot
jira.atlassian.com
40

EPSS

0.157

Percentile

96.0%

The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation check.

EPSS

0.157

Percentile

96.0%