CVE-2018-20826

Affected software: Atlassian Jira (inline-create REST resource). Vulnerability: missing authorization check allows an authenticated remote attacker to set the reporter in issues. Root cause: bypass of authorization in the inline-create REST endpoint prior to version 7.12.3. Impact: attacker can m...

Permissions bypass in the inline-create rest resource - CVE-2018-20826

The inline-create rest resource in Jira before version 7.12.3 allows authenticated remote attackers to set the reporter in issues via a missing authorisation check...

Permissions bypass in the inline-create rest resource - CVE-2018-20826

The inline-create rest resource in Jira before version 7.12.3 allows authenticated remote attackers to set the reporter in issues via a missing authorisation check...