Atlassian Jira Server-Side Request Forgery Vulnerability (CNVD-2019-32327)

Atlassian Jira is a tool developed by Australian company Atlassian for defect tracking, issue tracking and project management. A server-side request forgery vulnerability exists in the /plugins/servlet/gadgets/makeRequest resource in versions of Atlassian Jira prior to 8.4.0, which can be exploit...

Atlassian Jira Information Disclosure Vulnerability (CNVD-2019-32326)

Atlassian Jira is a tool developed by Australian company Atlassian for defect tracking, issue tracking and project management. An information disclosure vulnerability exists in the /rest/api/1.0/render resource in Atlassian Jira versions prior to 8.4.0, which can be exploited by a remote attacker...

Atlassian Jira Cross-Site Scripting Vulnerability (CNVD-2019-32325)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A cross-site scripting vulnerability exists in the searchOwnerUserName parameter in the FilterPickerPopup.jspa resource in...

Atlassian Jira Cross-Site Scripting Vulnerability (CNVD-2019-32321)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. Atlassian Jira suffers from a cross-site scripting vulnerability that can be exploited by remote attackers to inject arbitrary...

Atlassian JIRA < 8.4.0 SSRF

Binary data 701221.prm...

Atlassian Confluence 6.1.x < 6.6.16 / 6.7.x < 6.13.7 / 6.14.x < 6.15.8 Local File Disclosure Vulnerability

According to its self-reported version number, the Atlassian Confluence application running on the remote host is 6.1.x prior to 6.6.16, 6.7.x prior to 6.13.7, 6.14.x prior to 6.15.8. It is, therefore, affected by a local file disclosure vulnerability which exists in page export component. An...

Atlassian JIRA 7.x.x < 7.13.1 / 8.0.0 Cross-Site Scripting (XSS) Vulnerability (SB18-141)

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is potentially affected by a cross-site scripting vulnerability which allows a reflected cross-site scripting XSS attack. This flaw exists because the activity stream gadget does not...

Atlassian JIRA Authentication Bypass Vulnerability (JRASERVER-69239)

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is prior to 7.12.3. It is, therefore, affected by an authentication bypass vulnerability in its inline-create REST component. An authenticated, remote attacker can exploit this, by sendin...

Atlassian JIRA Information Disclosure Vulnerability (JRASERVER-69797)

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is prior to 7.13.4 or 8.0.x prior to 8.2.2. It is, therefore, affected by an information disclosure vulnerability in its login.jsp component due to insufficent validation of user input. A...

Atlassian JIRA < 7.13.4 / 8.0.x < 8.1.0 Epic Name DoS (SB19-182)

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is potentially affected by a unspecified flaw in 'Epic Name' ordering operations. A remote, authenticated attacker could cause a denial of service. %NASLMINLEVEL 70300 C Tenable Network...

Atlassian JIRA worklog Information Disclosure

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is prior to 7.3.17, or 8.0.x prior to 8.3.2. It is, therefore, affected by an information disclosure vulnerability. An authenticated, remote attacker can exploit this to disclose...

Atlassian JIRA Open Redirect Vulnerabilities

According to its self-reported version number, the instance of Atlassian JIRA hosted on the remote web server is prior to 7.3.16, 8.2.x prior to 8.2.3, or 8.3.x prior to 8.3.2. It is, therefore, affected by multiple vulnerabilities: - An open rediect vulnerability exists in startup.jsp. An...

Atlassian Jira Open Redirect Vulnerability (CNVD-2019-30065)

Jira is a tool developed by Australian company Atlassian for defect tracking, issue tracking and project management. An open redirect vulnerability exists in the startup.jsp resource in Jira. A remote attacker could exploit this vulnerability to redirect users to a different website, which could ...

Atlassian Jira Information Disclosure Vulnerability (CNVD-2019-29114)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in the /rest/issueNav/1/issueTable resource in Atlassian Jira versions prior to...

Atlassian Universal Plugin Manager Cross-Site Request Forgery Vulnerability

Atlassian Universal Plugin Manager is a set of tools from Atlassian Australia for managing add-ons in Atlassian applications. A cross-site request forgery vulnerability exists in the Uninstall REST endpoint in Atlassian Universal Plugin Manager versions prior to 2.22.19, 3.0.x versions prior to...

Atlassian Jira Cross-Site Request Forgery Vulnerability (CNVD-2019-29113)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A cross-site request forgery vulnerability exists in Atlassian Jira versions prior to 8.3.2. The vulnerability stems from a WEB...

Atlassian Jira wikirenderer component cross-site scripting vulnerability

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all kinds of issues and defects in the workplace. wikirenderer is one of the components that can convert wiki content to HTML, Docbook and other formats. A cross-site scripting...

Atlassian Jira Open Redirect Vulnerability (CNVD-2019-30069)

Jira is a tool developed by Australian company Atlassian for defect tracking, issue tracking and project management. An open redirect vulnerability exists in the ChangeSharedFilterOwner resource in Jira. A remote attacker can exploit this vulnerability to attack users and in some cases obtain a...

CVE-2019-14999

The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from version 4.0.0 before version 4.0.3 allows remote attackers to uninstall plugins using a Cross-Site Request Forgery CSRF vulnerability on an authenticated...

Cross site request forgery (csrf)

The Uninstall REST endpoint in Atlassian Universal Plugin Manager before version 2.22.19, from version 3.0.0 before version 3.0.3 and from version 4.0.0 before version 4.0.3 allows remote attackers to uninstall plugins using a Cross-Site Request Forgery CSRF vulnerability on an authenticated...