Atlassian Jira 8.14.x < 8.18.2 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.18, 8.6.x 8.13.10 or 8.14.x 8.18.2. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability in the...

Atlassian Jira < 8.5.18 Multiple Vulnerabilities

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.18, 8.6.x 8.13.10 or 8.14.x 8.18.2. It is, therefore, affected by multiple vulnerabilities: - An information disclosure vulnerability in the...

CVE-2021-39121

Summary: CVE-2021-39121 is an information-disclosure vulnerability in Atlassian Jira Server/Data Center that allows an authenticated remote attacker to enumerate private project keys via the /rest/api/latest/projectvalidate/key endpoint. Affected versions: before 8.5.18; 8.6.0 before 8.13.10; 8.1...

Project key enumeration via the /rest/api/latest/projectvalidate/key endpoint - CVE-2021-39121

Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to enumerate the keys of private Jira projects via an Information Disclosure vulnerability in the /rest/api/latest/projectvalidate/key endpoint. The affected versions are before version 8.5.18, from...