CVE-2008-6531

The WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers to invoke exposed public JIRA methods via a crafted URL that is…

published March 26, 2009

CVSS
—
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

The WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers to invoke exposed public JIRA methods via a crafted URL that is dynamically transformed into method calls, aka "WebWork 1 Parameter Injection Hole."

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02630 · 85.3th percentile
Published
2009-03-26T20:28Z
EPSS history
Timeline
  • 26 MAR 20:28Z
    The WebWork 1 web application framework in Atlassian JIRA before 3.13.2 allows remote attackers to invoke exposed public JIRA methods via a crafted URL that is…
    cvelistv5