Lucene search
+L

1 matches found

Atlassian
Atlassian
added 2014/08/15 11:35 p.m.21 views

"Issue Does Not Exist" page leaks information to non-logged in users

Trying to open a URL for an issue that does not exist shows the "Issue Does Not Exist" error page, even if you are logged out and the project is not publicly viewable. In contrast, trying to open the URL for valid issue will prompt the user to login. In this way, an unprivileged user can learn...

2.6AI score
SaveExploits0Affected Software1
Rows per page
Query Builder