Back to feed
EUVD-2015-8362 · Published Jan 8, 2016
Atlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer attaches the wrong image to e-mail notifications when a user views an issue with inline wiki markup referencing an image attachment, which might allow remote attackers to obtain sensitive information by updating a different issue that includes wiki markup for an external image reference.
Technologies
Atlassian Jira ServerAtlassian Jira CoreAtlassian Jira Service Desk
Weaknesses
CWE-200
CVSS scores
- v3.03.1
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N - v2.03.5
AV:N/AC:M/Au:S/C:P/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
