60
CVE-2019-14995
PoC ×2—CVSS 3.1
5.3 medium
EPSS
3%p87
Published
()
Modified
Description
The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an attachment with a specific name exists and if an issue key is valid via a missing permissions check.
- Vendors
- atlassian
- Products
- jira server
- Weakness
- CWE-863, CWE-862
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N