Lucene search
+L

7 matches found

Github Security Blog
Github Security Blog
•added 2026/10/07 8:28 p.m.•19 views

Payload authentication token field handling issue

Impact Under certain field configurations, Payload could include unintended values in the authentication token issued at login. You are affected if: - You use an affected Payload version and have configured a custom field option that maps a field to a reserved authentication claim name. Patches...

9.2CVSS5.9AI score0.00376EPSS
SaveExploits0References5Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•35 views

EUVD-2020-23782

Malware in sbrugna...

5.3CVSS6.1AI score0.01241EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2021/02/15 12:15 a.m.•27 views

CVE-2020-36237

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure vulnerability in the /rest/api/2/customFieldOption/ endpoint. The affected versions are before version 8.15.0...

5.3CVSS6.1AI score0.01241EPSS
SaveExploits0References1
Prion
Prion
•added 2021/02/15 12:15 a.m.•27 views

Information disclosure

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure vulnerability in the /rest/api/2/customFieldOption/ endpoint. The affected versions are before version 8.15.0...

5CVSS5.2AI score0.01241EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
•added 2021/02/14 11:55 p.m.•46 views

CVE-2020-36237

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure vulnerability in the /rest/api/2/customFieldOption/ endpoint. The affected versions are before version 8.15.0...

5.2AI score0.01241EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/02/14 12:00 a.m.•2 views

PT-2021-11974

Name of the Vulnerable Software and Affected Versions: Atlassian Jira Server and Data Center versions prior to 8.15.0 Description: The issue allows unauthenticated remote attackers to view custom field options via an Information Disclosure vulnerability in the "/rest/api/2/customFieldOption/"...

5.3CVSS5.8AI score0.01241EPSS
SaveExploits0References5
Atlassian
Atlassian
•added 2021/02/04 1:15 a.m.•140 views

Custom field options are exposed via an unauthenticated REST API endpoint - CVE-2020-36237

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure vulnerability in the /rest/api/2/customFieldOption/ endpoint. The affected versions are before version 8.15.0. Affected versions: version...

5.3CVSS5.8AI score0.01241EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder