4243 matches found
CVE-2021-41313
Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....
Authorization
Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....
CVE-2021-41313
CVE-2021-41313 affects Atlassian Jira Server and Data Center prior to 8.20.7. Affected component: the /secure/admin/ConfigureBatching!default.jspa endpoint, where an Improper Authorization issue allows authenticated but non-admin remote attackers to edit email batch configurations. Impact, as des...
PT-2021-23268 · Atlassian · Jira
Name of the Vulnerable Software and Affected Versions: Atlassian Jira Server and Data Center versions prior to 8.20.7 Description: The issue allows authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the...
CVE-2021-41309
Affected versions of Atlassian Jira Server and Data Center allow a user who has had their Jira Service Management access revoked to export audit logs of another user's Jira Service Management project via a Broken Authentication vulnerability in the /plugins/servlet/audit/resource endpoint. The...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
CVE-2021-26084 CVE-2021-26084，Atlassian Confluence OGNL注入漏洞 A...
CVE-2021-41308
Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File Replication settings via a Broken Access Control vulnerability in the ReplicationSettings!default.jspa endpoint. The affected versions are before version 8.6.0,...
CVE-2021-41305
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view the names of private projects and filters via an Insecure Direct Object References IDOR vulnerability in the Average Number of Times in Status Gadget. The affected versions are before version...
CVE-2021-41307
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view the names of private projects and private filters via an Insecure Direct Object References IDOR vulnerability in the Workload Pie Chart Gadget. The affected versions are before version 8.13.1...
CVE-2021-41308
Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File Replication settings via a Broken Access Control vulnerability in the ReplicationSettings!default.jspa endpoint. The affected versions are before version 8.6.0,...
CVE-2021-41307
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view the names of private projects and private filters via an Insecure Direct Object References IDOR vulnerability in the Workload Pie Chart Gadget. The affected versions are before version 8.13.1...
CVE-2021-41306
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and filter names via an Insecure Direct Object References IDOR vulnerability in the Average Time in Status Gadget. The affected versions are before version 8.13.12, and from version...
CVE-2021-41304
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the /secure/admin/ImporterFinishedPage.jspa error message. The affected versions are before version 8.13.12, and from...
Spoofing
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and filter names via an Insecure Direct Object References IDOR vulnerability in the Average Time in Status Gadget. The affected versions are before version 8.13.12, and from version...
CVE-2021-41308
CVE-2021-41308 affects Atlassian Jira Server/Data Center where authenticated non-administrators can edit File Replication settings via Broken Access Control on ReplicationSettings!default.jspa. Affected: Jira versions before 8.6.0; 8.7.0 before 8.13.12; 8.14.0 before 8.20.1. Connected documents c...
CVE-2021-41307
CVE-2021-41307 affects Atlassian Jira Server and Data Center, where an IDOR flaw in the Workload Pie Chart Gadget allows unauthenticated remote attackers to view the names of private projects and private filters. Affected versions are before 8.13.12 and 8.14.0 up to 8.20.0 (inclusive of no fixes ...
CVE-2021-41306
Atlassian Jira Server/Data Center versions prior to 8.13.12 and 8.14.0 up to 8.20.0 are affected by an Insecure Direct Object References (IDOR) vulnerability in the Average Time in Status Gadget that allows anonymous remote attackers to view names of private projects and private filters. The root...
CVE-2021-41306
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and filter names via an Insecure Direct Object References IDOR vulnerability in the Average Time in Status Gadget. The affected versions are before version 8.13.12, and from version...
CVE-2021-41305
CVE-2021-41305 affects Atlassian Jira Server and Data Center (Average Number of Times in Status Gadget). The vulnerability is an Insecure Direct Object Reference (IDOR) that allows anonymous remote attackers to view the names of private projects and private filters. Affected versions are prior to...
CVE-2021-41304
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the /secure/admin/ImporterFinishedPage.jspa error message. The affected versions are before version 8.13.12, and from...