Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Atlassian Jira 8.3.2 Clear all filters
TI-2019-06063 CVE-2019-8447 · GHSA-v6j9-3grc-c9r7

Cross-site request forgery in Atlassian Jira

Priority LOW 21

The ServiceExecutor resource in Jira before version 8.3.2 allows remote attackers to trigger the creation of export files via a Cross-site request forgery (CSRF) vulnerability.

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.00679 Published 2019-08-23 Fixed in 8.3.2 CWE-352
TI-2019-06062 CVE-2019-8446 · GHSA-hjjc-3cqf-h5fg

Incorrect authorization in Atlassian Jira

Priority MEDIUM 41

The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation check.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.1755 Published 2019-08-23 Fixed in 8.3.2 CWE-863
TI-2019-08657 CVE-2019-11584 · GHSA-8r3m-p3xg-5qjq

Cross-site scripting in Atlassian Jira

Priority LOW 29

The MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the priority icon url of an issue priority.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0097 Published 2019-08-23 Fixed in 8.3.2 CWE-79