CVE-2023-22503: Exposure of Sensitive Information to an Unauthorized Actor

Affected versions of Atlassian Confluence Server and Data Center allow anonymous remote attackers to view the names of attachments and labels in a private Confluence space. This occurs via an Information Disclosure vulnerability in the macro preview feature. This vulnerability was reported by Roj...

CVE-2022-36804: Improper Neutralization of Special Elements used in an OS Command

Multiple API endpoints in Atlassian Bitbucket Server and Data Center 7.0.0 before version 7.6.17, from version 7.7.0 before version 7.17.10, from version 7.18.0 before version 7.21.4, from version 8.0.0 before version 8.0.3, from version 8.1.0 before version 8.1.3, and from version 8.2.0 before...

Atlassian Jira 安全漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is primarily used to track and manage various types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira Service Management Server and Data Center versions prior to...

Cross site scripting

The Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5.0 before 7.6.3, and from version 7.7.0 before version 7.7.4 allows remote attackers with permission to edit a page or blog to inject arbitrary HTML or JavaScript via a cross site scripting XSS...

CVE-2021-43944: Improper Control of Generation of Code

This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has been implemented. Affected versions of Atlassian Jira Server and Data Center allowed remote attackers with system administrator permissions to execute arbitrary code via Templat...

PT-2022-11941

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.13.15 Atlassian Jira Server and Data Center versions 8.14.0 through 8.20.3 Description The issue allows remote attackers to modify several resources, including CsvFieldMappingsPage.jspa...

CVE-2021-43947: Undefined Security Weakness

Affected versions of Atlassian Jira Server and Data Center allow remote attackers with administrator privileges to execute arbitrary code via a Remote Code Execution RCE vulnerability in the Email Templates feature. This issue bypasses the fix of https://jira.atlassian.com/browse/JSDSERVER-8665...

CVE-2021-43946: Undefined Security Weakness

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to add administrator groups to filter subscriptions via a Broken Access Control vulnerability in the /secure/EditSubscription.jspa endpoint. The affected versions are before version 8.13.21, and from...

CVE-2021-41311: Improper Authentication

Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that has had its access revoked to modify projects' Users & Roles settings, via a Broken Authentication vulnerability in the /plugins/servlet/project-config/PROJECT/roles endpoint. T...

Atlassian Jira 权限许可和访问控制问题漏洞

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage various types of issues and defects in the workplace. A privilege permission and access control issue vulnerability exists in Atlassian Jira Server and Data Center, which stems...

CVE-2021-39121: Undefined Security Weakness

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projects via an Information Disclosure vulnerability in the /rest/api/latest/projectvalidate/key endpoint. The affected versions are before version 8.5.18, from...

PT-2021-22380

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.13.14 Atlassian Jira Server and Data Center versions 8.14.0 through 8.18.x Description The issue allows remote attackers to impact the application's availability via a Denial of Service...

CVE-2021-39115

Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers with "Jira Administrators" access to execute arbitrary Java code or run arbitrary system commands via a ServerSide Template Injection vulnerability in the Email Template feature. The affected...

CVE-2021-39113

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, via a Broken Access Control vulnerability in the allowlist feature. The affected versions are before version 8.13.9, and from version 8.14....

PT-2021-16936

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 8.5.11 Atlassian Jira Server and Data Center versions 8.6.0 through 8.13.3 Atlassian Jira Server and Data Center versions 8.14.0 through 8.15.0 Description The issue allows unauthenticate...

PT-2021-11669

Name of the Vulnerable Software and Affected Versions: Atlassian Jira Server and Data Center versions prior to 8.5.11 Atlassian Jira Server and Data Center versions 8.6.0 through 8.13.3 Atlassian Jira Server and Data Center versions 8.14.0 through 8.14.1 Description: The issue allows remote...

PT-2020-4284

Name of the Vulnerable Software and Affected Versions: Atlassian Jira Server and Data Center versions prior to 7.13.6 Atlassian Jira Server and Data Center versions 8.0.0 through 8.5.7 Atlassian Jira Server and Data Center versions 8.6.0 through 8.12.0 Description: The issue is related to the...

Atlassian Jira Information Disclosure Vulnerability (CNVD-2020-52940)

Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. An information disclosure vulnerability exists in Atlassian Jira Server and Data Center versions prior to 7.13.7, 8.0.0 to 8.5.8...

PT-2020-13916

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Data Center versions prior to 7.13.7 Atlassian Jira Server and Data Center versions 8.0.0 through 8.5.7 Atlassian Jira Server and Data Center versions 8.6.0 through 8.11.9 Description The issue allows remote attackers...

PT-2020-13914

Name of the Vulnerable Software and Affected Versions Atlassian Confluence Server and Data Center versions prior to 7.4.2 Atlassian Confluence Server and Data Center versions 7.5.0 through 7.5.1 Description The issue allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site...