Lucene search
+L

1 matches found

Atlassian
Atlassian
added 2012/11/29 1:27 p.m.19 views

CreateSupportZipAction directory traversal

There’s a directory traversal vulnerability in the CreateSupportZipAction action that allows a malicious user to include arbitrary log files into a support zip. This is because the SupportUtility object is marked as @ParameterSafe, and no validation is performed on its serverLogsDirectory path...

2AI score
SaveExploits0Affected Software1
Rows per page
Query Builder