Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-3mvr-qcj7-4jj5

Опубликовано: 30 апр. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 6.5

Описание

Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7.6.5, from version 7.7.0 before version 7.7.3, from version 7.8.0 before version 7.8.3 and before version 7.9.0 allow remote attackers to run import operations and to determine if an internal service exists through missing permission checks.

Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7.6.5, from version 7.7.0 before version 7.7.3, from version 7.8.0 before version 7.8.3 and before version 7.9.0 allow remote attackers to run import operations and to determine if an internal service exists through missing permission checks.

EPSS

Процентиль: 59%
0.00384
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

CVSS3: 6.5
nvd
около 7 лет назад

Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7.6.5, from version 7.7.0 before version 7.7.3, from version 7.8.0 before version 7.8.3 and before version 7.9.0 allow remote attackers to run import operations and to determine if an internal service exists through missing permission checks.

EPSS

Процентиль: 59%
0.00384
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-862