CVE-2021-26069: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary files and enumerate project keys via an Information Disclosure vulnerability in the /rest/api/1.0/issues/id/ActionsAndOperations API endpoint. The affected versions are before...

PT-2021-16936

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.5.11 Atlassian Jira Server and Data Center versions 8.6.0 through 8.13.3 Atlassian Jira Server and Data Center versions 8.14.0 through 8.15.0 Description The issue allows unauthenticate...