CVE-2019-11581

Injection de template non authentifiée dans Atlassian Jira CVE-2019-11581 I Construction 1. Version vulnérable root@kitploit: 4.4.x 5.x.x 6.x.x 7.0.x 7.1.x 7.2.x 7.3.x 7.4.x 7.5.x 7.6.x before 7.6.14 the fixed version for 7.6.x 7.7.x 7.8.x 7.9.x 7.10.x 7.11.x 7.12.x 7.13.x before 7.13.5 the fixed...

CVE-2019-11581

CVE-2019-11581 ثغرة حقن القوالب في Atlassian JIRA وتنفيذ الأوامر عن بُعد RCE عرض توضيحي python CVE-2019-11581.py http://xx.xx.xx.xx:8080/ "Command" تحميل الإصدار المعرّض للثغرة https://product-downloads.atlassian.com/software/jira/downloads/atlassian-jira-software-7.13.0-x64.exe إثبات المفهوم PoC...

CVE-2019-3403

CVE-2019-3403 أردت أن أتمكن بسهولة من استغلال CVE-2019-3403 لاستخراج جميع المستخدمين من تطبيق JIRA، لذا جهزت هذا السكربت بسرعة. إنه ليس أنظف كود على الإطلاق، ولا يتعامل مع الطلبات التي تعيد أكثر من 1000 مستخدم سيقتصر على أول 1000 فقط - لكنه يستطيع استخراج جميع المستخدمين بسرعة من خادم JIRA معرض...

CVE-2020-14181

CVE-2020-14181 Poc لـ CVE-2020-14181 الإصدارات المتأثرة من Atlassian Jira Server وData Center تسمح لمستخدم غير مصادق عليه بتعداد المستخدمين عبر ثغرة كشف المعلومات في نقطة النهاية /ViewUserHover.jspa. تم اكتشاف هذه الثغرة بواسطة Mikhail Klyuchnikov من Positive Technologies. POC لـ CVE-2020-1481 -...

CVE-2022-0540-RCE

Atlassian Jira Seraph : contournement de l'authentification RCE CVE-2022-0540 Anglais • Chinois Détails de l'exploit Comme le montre le blog de l'auteur, Atlassian a fourni une longue liste de plugins affectés dont la grande majorité étaient des faux positifs, et l'auteur a répertorié plusieurs...

JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)

The JIRA Workflow Designer Plugin in Atlassian JIRA Server before 6.3.0 improperly uses an XML parser and deserializer, which allows remote attackers to execute arbitrary code, read arbitrary files, or cause a denial of service via a crafted serialized Java object. id: CVE-2017-5983 info: name:...

Atlassian Jira WallboardServlet <7.13.1 - Cross-Site Scripting

The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross-site scripting vulnerability in the cyclePeriod parameter. id: CVE-2018-20824 info: name: Atlassian Jira WallboardServlet 7.13.1 - Cross-Site Scripting author:...

Atlassian Jira <7.13.3/8.0.0-8.1.1 - Incorrect Authorization

Atlasssian Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 is susceptible to incorrect authorization. The ManageFilters.jspa resource allows a remote attacker to enumerate usernames via an incorrect authorization check, thus possibly obtaining sensitive information, modifyi...

CVE-2020-14181

CVE-2020-14181 تسمح الإصدارات المتأثرة من Atlassian Jira Server و Data Center لمستخدم غير مصادَق عليه بتعداد المستخدمين عبر ثغرة كشف المعلومات في نقطة النهاية /ViewUserHover.jspa. تم اكتشاف هذه الثغرة بواسطة Mikhail Klyuchnikov من Positive Technologies. الإصدارات المتأثرة: الإصدار 7.13.16 8.0.0 ≤...

PT-2026-49655

Name of the Vulnerable Software and Affected Versions syracom AG Secure Login 2FA for Atlassian Jira, Confluence, and Bitbucket versions 3.4.0.x Description An authentication bypass exists where an attacker with valid user credentials can circumvent the two-factor authentication 2FA flow. By...

Atlassian Jira Service Management Data Center and Server 10.3.0 < 10.3.16 / 11.0.x < 11.2.1 / 11.3.0 (JSDSERVER-16502)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16502 advisory. - Improper Input Validation vulnerability in sha.js allows Input Data Manipulation.This issue affects...

Atlassian Jira Service Management Data Center and Server 10.3.0 < 10.3.16 (JSDSERVER-16497)

The version of Atlassian Jira Service Management Data Center and Server Jira Service Desk running on the remote host is affected by a vulnerability as referenced in the JSDSERVER-16497 advisory. - Versions of the package cross-spawn before 6.0.6, from 7.0.0 and before 7.0.5 are vulnerable to...

CVE-2022-38367

The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all users from Jira by making an HTTP request to the affected endpoint...

Atlassian Jira 10.3.x < 10.3.13 XML External Entity Injection

According to its self-reported version number, the Atlassian Jira application running on the remote host is 10.3.x prior to 10.3.13 or 11.x prior to 11.2.0. It is, therefore, affected by a XML External Entity Injection XXE vulnerability. Note that the scanner has not tested for these issues but h...

Atlassian Jira 11.x < 11.2.0 XML External Entity Injection

According to its self-reported version number, the Atlassian Jira application running on the remote host is 10.3.x prior to 10.3.13 or 11.x prior to 11.2.0. It is, therefore, affected by a XML External Entity Injection XXE vulnerability. Note that the scanner has not tested for these issues but h...

Atlassian Jira 10.3.x < 10.3.12 Path Traversal

According to its self-reported version number, the Atlassian Jira application running on the remote host is 9.12.x prior to 9.12.28, 10.3.x prior to 10.3.12 or 11.x prior to 11.1.0. It is, therefore, affected by a path traversal vulnerability. Note that the scanner has not tested for these issues...

Atlassian Jira Align 安全漏洞

Atlassian Jira Align is a strategic-grade agile management platform from Atlassian Australia. A security vulnerability exists in Atlassian Jira Align that stems from an authorization issue that could lead to a low-privileged user modifying another user's private manifest...

Atlassian Jira Align 安全漏洞

Atlassian Jira Align is a strategic-grade agile management platform from Atlassian Australia. A security vulnerability exists in Atlassian Jira Align that stems from an authorization issue that could lead to the disclosure of sensitive information...

Atlassian Jira Align 安全漏洞

Atlassian Jira Align is a strategic-grade agile management platform from Atlassian Australia. A security vulnerability exists in Atlassian Jira Align that stems from an authorization issue that could lead to the disclosure of sensitive information...

Atlassian Jira Align 安全漏洞

Atlassian Jira Align is a strategic-grade agile management platform from Atlassian Australia. A security vulnerability exists in Atlassian Jira Align that stems from an authorization issue that could lead to the disclosure of sensitive information...