CVE-2022-36800

—

CVSS 3.1

4.3 medium

EPSS

<1%p48

Published

Aug 3, 2022 (Aug 3, 2022)

Modified

Jun 17, 2026

Description

Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse Users" permission to view groups via an Information Disclosure vulnerability in the browsegroups.action endpoint. The affected versions are before version 4.22.2.

Vendors: atlassian
Products: jira service management
Weakness: CWE-732
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.6%)

In the news0 stories

No ingested article mentions this CVE yet.