4008 matches found
CVE-2021-41308
Affected versions of Atlassian Jira Server and Data Center allow authenticated yet non-administrator remote attackers to edit the File Replication settings via a Broken Access Control vulnerability in the ReplicationSettings!default.jspa endpoint. The affected versions are before version 8.6.0,...
CVE-2021-41306
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and filter names via an Insecure Direct Object References IDOR vulnerability in the Average Time in Status Gadget. The affected versions are before version 8.13.12, and from version...
CVE-2021-41307
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view the names of private projects and private filters via an Insecure Direct Object References IDOR vulnerability in the Workload Pie Chart Gadget. The affected versions are before version 8.13.1...
CVE-2021-41304
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the /secure/admin/ImporterFinishedPage.jspa error message. The affected versions are before version 8.13.12, and from...
Spoofing
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and filter names via an Insecure Direct Object References IDOR vulnerability in the Average Time in Status Gadget. The affected versions are before version 8.13.12, and from version...
CVE-2021-41308
CVE-2021-41308 affects Atlassian Jira Server/Data Center where authenticated non-administrators can edit File Replication settings via Broken Access Control on ReplicationSettings!default.jspa. Affected: Jira versions before 8.6.0; 8.7.0 before 8.13.12; 8.14.0 before 8.20.1. Connected documents c...
CVE-2021-41307
CVE-2021-41307 affects Atlassian Jira Server and Data Center, where an IDOR flaw in the Workload Pie Chart Gadget allows unauthenticated remote attackers to view the names of private projects and private filters. Affected versions are before 8.13.12 and 8.14.0 up to 8.20.0 (inclusive of no fixes ...
CVE-2021-41306
Atlassian Jira Server/Data Center versions prior to 8.13.12 and 8.14.0 up to 8.20.0 are affected by an Insecure Direct Object References (IDOR) vulnerability in the Average Time in Status Gadget that allows anonymous remote attackers to view names of private projects and private filters. The root...
CVE-2021-41306
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and filter names via an Insecure Direct Object References IDOR vulnerability in the Average Time in Status Gadget. The affected versions are before version 8.13.12, and from version...
CVE-2021-41305
CVE-2021-41305 affects Atlassian Jira Server and Data Center (Average Number of Times in Status Gadget). The vulnerability is an Insecure Direct Object Reference (IDOR) that allows anonymous remote attackers to view the names of private projects and private filters. Affected versions are prior to...
CVE-2021-41304
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the /secure/admin/ImporterFinishedPage.jspa error message. The affected versions are before version 8.13.12, and from...
CVE-2021-41311
Affected versions of Atlassian Jira Server and Data Center allow attackers with access to an administrator account that has had its access revoked to modify projects' Users & Roles settings, via a Broken Authentication vulnerability in the /plugins/servlet/project-config/PROJECT/roles endpoint. T...
PT-2021-23259 · Atlassian · Jira
Name of the Vulnerable Software and Affected Versions: Atlassian Jira Server and Data Center versions prior to 8.13.12 Description: The issue allows anonymous remote attackers to view the names of private projects and filters via an Insecure Direct Object References IDOR vulnerability in the...
CVE-2021-41310
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the Associated Projects feature /secure/admin/AssociatedProjectsForCustomField.jspa. The affected versions are before...
CVE-2021-41313
Affected versions of Atlassian Jira Server and Data Center allow authenticated but non-admin remote attackers to edit email batch configurations via an Improper Authorization vulnerability in the /secure/admin/ConfigureBatching!default.jspa endpoint. The affected versions are before version 8.20....
Atlassian Jira 安全漏洞
Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage all types of issues and defects in the workplace. A security vulnerability exists in Atlassian Jira that originates in the Atlassian Jira server and data center that allows remot...
Atlassian Jira 跨站脚本漏洞
Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is primarily used to track and manage various types of issues and defects in the workplace. A cross-site scripting vulnerability exists in Atlassian Jira Server and Data Center that originates from a...
PT-2021-23261 · Atlassian · Jira
Name of the Vulnerable Software and Affected Versions: Atlassian Jira Server and Data Center versions prior to 8.13.12 Atlassian Jira Server and Data Center versions 8.14.0 through 8.19.x Description: The issue allows unauthenticated remote attackers to view the names of private projects and...
Atlassian Jira 权限许可和访问控制问题漏洞
Atlassian Jira is a defect tracking management system from Atlassian Australia. The system is used to track and manage various types of issues and defects in the workplace. A privilege permission and access control issue vulnerability exists in Atlassian Jira Server and Data Center, which stems...
