Information Disclosure Vulnerability in Atlassian JIRA Software

JIRA Software is a project and transaction tracking tool from Atlassian that is used in a wide range of work areas such as defect tracking, customer service, requirements gathering, process approvals, task tracking, project tracking and agile management. An information disclosure vulnerability...

CVE-2015-8481: Exposure of Sensitive Information to an Unauthorized Actor

Atlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer attaches the wrong image to e-mail notifications when a user views an issue with inline wiki markup referencing an image attachment, which might allow remote attackers to obtain sensitive information...