Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Atlassian Jira Data Center, Jira Server 8.13.12, 8.20.0, unspecified Clear all filters
TI-2021-18136 CVE-2021-41307 · GHSA-r7h9-6386-76cq

Authorization bypass in Atlassian Jira Server

Priority MEDIUM 42

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view the names of private projects and private filters via an Insecure Direct Object References (IDOR) vulnerability in…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01674 Published 2021-10-26 Fixed in 8.13.12, 8.20.0 CWE-639
TI-2021-18135 CVE-2021-41306 · GHSA-m355-gfjx-99w5

Authorization bypass in Atlassian Jira Server

Priority MEDIUM 42

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view private project and filter names via an Insecure Direct Object References (IDOR) vulnerability in the Average Time in St…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01622 Published 2021-10-26 Fixed in 8.13.12, 8.20.0 CWE-639