Atlassian Jira Server/Data Center <8.5.8/8.6.0 - 8.11.1 - Information Disclosure

Atlassian Jira Server and Data Center before 8.5.8 and 8.6.0 through 8.11.1 are susceptible to information disclosure via the /secure/QueryComponent!Default.jspa endpoint. An attacker can view custom field names and custom SLA names. id: CVE-2020-14179 info: name: Atlassian Jira Server/Data Cente...

Jira <8.4.0 - Information Disclosure

Jira before 8.4.0 is susceptible to information disclosure. The /rest/api/latest/groupuserpicker resource can allow an attacker to enumerate usernames, and thereby potentially obtain sensitive information, modify data, and/or execute unauthorized operations. id: CVE-2019-8449 info: name: Jira 8.4...

Atlassian Jira <7.13.3/8.0.0-8.1.1 - Incorrect Authorization

Atlasssian Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 is susceptible to incorrect authorization. The ManageFilters.jspa resource allows a remote attacker to enumerate usernames via an incorrect authorization check, thus possibly obtaining sensitive information, modifyi...

Jira Netic Group Export <1.0.3 - Missing Authorization

Jira Netic Group Export add-on before 1.0.3 contains a missing authorization vulnerability. The add-on does not perform authorization checks, which can allow an unauthenticated user to export all groups from the Jira instance by making a groupexportdownload=true request to a...

Jira Server and Data Center - Information Disclosure

Jira Server and Data Center is susceptible to information disclosure. An attacker can enumerate users via the QueryComponentRendererValue!Default.jspa endpoint and thus potentially access sensitive information, modify data, and/or execute unauthorized operations, Affected versions are before...

STAGIL Navigation for Jira Menu & Themes <2.0.52 - Local File Inclusion

STAGIL Navigation for Jira Menu & Themes plugin before 2.0.52 is susceptible to local file inclusion via modifying the fileName parameter to the snjCustomDesignConfig endpoint. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This...

Jira - Incorrect Authorization

Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 is susceptible to an incorrect authorization check in the /rest/api/2/user/picker rest resource, enabling an attacker to enumerate usernames and gain improper access. id: CVE-2019-3403...

Atlassian Jira IconURIServlet - Cross-Site Scripting/Server-Side Request Forgery

The Atlassian Jira IconUriServlet of the OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 contains a cross-site scripting vulnerability which allows remote attackers to access the content of internal network resources and/or perform an attack via...

Jira Server Pre-Auth - Arbitrary File Retrieval (WEB-INF, META-INF)

The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check. id: CVE-2020-29453 info: name: Jira Server Pre-Auth - Arbitrary File...

cve-2022-1471-jira-lab

CVE-2022-1471 — Lab RCE SnakeYAML contesto Jira / Automation for Jira Lab offline e autonomo che dimostra il meccanismo alla base di CVE-2022-1471 deserializzazione non sicura SnakeYAML → RCE, CVSS 9.8, come sfruttato nel finding su Jira / Jira Service Management contro un host con 9.4.9 range...

jira-exploits-cve

jira-exploits-cve Folgt uns Vulnmachines YouTube Twitter Facebook LinkedIn...

CVE-2020-14179

CVE-2020-14179 كشف بيانات حساسة عبر نقطة النهاية /secure/QueryComponent!Default.jspa الأولوية: عالية الإصدارات المتأثرة: 8.6.0 | 8.8.0 | 8.5.5 | 8.9.0 | 8.10.0 | 8.11.0 تسمح الإصدارات المتأثرة من Atlassian Jira Server و Data Center للمهاجمين البعيدين غير المصادق عليهم بعرض أسماء الحقول المخصصة...

purify

Purify All-in-one tool for managing vulnerability reports 🎮 Demo 📃 Docs 📹 Quick Vimeo...

xray

Welcome to xray 👋 A Powerful Security Assessment Tool 🏠 Documentation • ⬇️ Download xray • ⬇️ Download xpoc • ⬇️ Download xapp • 📖 Plugin Repository 中文版 Note: xray is not open source, just download the built binary files directly. The repository mainly contains community-contributed POCs. Each xray...

CVE-2023-26255-6

Script POC per la vulnerabilità di lettura arbitraria di file nel parametro FileName di STAGIL Navigation per Jira Istruzioni per l'uso: Rilevamento su URL singolo 1. Usare l'interfaccia a riga di comando per testare un singolo URL, passando il parametro -U con l'URL. 2. Osservare il risultato...

bulwark

An organizational asset and vulnerability management tool, with Jira integration, designed for generating application security reports. Features Multi-client Vulnerability Management Security Report Generation Jira Integration Team-based Roles Authorization API Key & Management Email Integration...

bulwark

Ein Tool zur Verwaltung von organisatorischen Assets und Schwachstellen, mit Jira-Integration, entwickelt für die Erstellung von Anwendungssicherheitsberichten. Funktionen Multi-Client-Schwachstellenverwaltung Erstellung von Sicherheitsberichten Jira-Integration Rollenbasierte Teamautorisierung...

Apache OFBiz Directory Traversal - Remote Code Execution

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.13 id: CVE-2024-32113 info: name: Apache OFBiz Directory Traversal - Remote Code Execution author: DhiyaneshDK severity: high description: |...

VulnWhisperer

Creadati utilizzabili dalle tue scansioni di vulnerabilità VulnWhisperer è uno strumento di gestione delle vulnerabilità e un aggregatore di report. VulnWhisperer recupera tutti i report dai diversi scanner di vulnerabilità e crea un file con un nome univoco per ciascuno, utilizzando...

salt-scanner

salt-scanner Uno scanner di vulnerabilità per Linux basato sulle API di Vulners Audit e Salt Open, con notifiche Slack e integrazione JIRA. Caratteristiche Notifiche Slack e caricamento report Integrazione JIRA Integrazione OpsGenie Requisiti Salt Open 2016.11.x salt-master, salt-minion¹ Python 2...