Atlassian

Jira

158 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.3

CVE-2020-36238

  • EPSS 1.59%
  • Veröffentlicht 01.04.2021 03:15:13
  • Zuletzt bearbeitet 21.11.2024 05:29:07

The /rest/api/1.0/render resource in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determine if a username is valid or n...

5.3

CVE-2020-36286

  • EPSS 1.41%
  • Veröffentlicht 01.04.2021 03:15:13
  • Zuletzt bearbeitet 21.11.2024 05:29:12

The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determine if a group exists & members...

7.2

CVE-2021-26070

  • EPSS 1.96%
  • Veröffentlicht 22.03.2021 05:15:13
  • Zuletzt bearbeitet 21.11.2024 05:55:48

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to evade behind-the-firewall protection of app-linked resources via a Broken Authentication vulnerability in the `makeRequest` gadget resource. The affected versions ar...

5.3

CVE-2021-26069

  • EPSS 2.51%
  • Veröffentlicht 22.03.2021 05:15:12
  • Zuletzt bearbeitet 21.11.2024 05:55:48

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to download temporary files and enumerate project keys via an Information Disclosure vulnerability in the /rest/api/1.0/issues/{id}/ActionsAndOperations...

4.3

CVE-2020-29451

  • EPSS 0.85%
  • Veröffentlicht 15.02.2021 01:15:12
  • Zuletzt bearbeitet 21.11.2024 05:24:01

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects via an Information Disclosure vulnerability in the Jira Projects plugin report page. The affected versions are before version 8.5.11, from ve...

4.8

CVE-2020-36234

  • EPSS 1.02%
  • Veröffentlicht 15.02.2021 00:15:12
  • Zuletzt bearbeitet 21.11.2024 05:29:06

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the Screens Modal view. The affected versions are before version 8.5.11, from v...

5.3

CVE-2020-36235

  • EPSS 2%
  • Veröffentlicht 15.02.2021 00:15:12
  • Zuletzt bearbeitet 21.11.2024 05:29:07

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field and custom SLA names via an Information Disclosure vulnerability in the mobile site view. The affected versions are before version ...

6.1

CVE-2020-36236

  • EPSS 1.27%
  • Veröffentlicht 15.02.2021 00:15:12
  • Zuletzt bearbeitet 21.11.2024 05:29:07

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the ViewWorkflowSchemes.jspa and ListWorkflows.jspa endpoints. The affected ver...

5.3

CVE-2020-36237

  • EPSS 1.24%
  • Veröffentlicht 15.02.2021 00:15:12
  • Zuletzt bearbeitet 21.11.2024 05:29:07

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure vulnerability in the /rest/api/2/customFieldOption/ endpoint. The affected versions are befor...

4.3

CVE-2020-36231

  • EPSS 1.2%
  • Veröffentlicht 02.02.2021 00:15:12
  • Zuletzt bearbeitet 21.11.2024 05:29:06

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have access to via an Insecure Direct Object References (IDOR) vulnerability. The affected versions are before version 8....