CVE-2015-8481

Atlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer attaches the wrong image to e-mail notifications when a user…

published January 8, 2016

CVSS
—
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

Atlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer attaches the wrong image to e-mail notifications when a user views an issue with inline wiki markup referencing an image attachment, which might allow remote attackers to obtain sensitive information by updating a different issue that includes wiki markup for an external image reference.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01255 · 69.1th percentile
Published
2016-01-08T19:00Z
EPSS history
Timeline
  • 08 JAN 19:00Z
    Atlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer attaches the wrong image to e-mail notifications when a user…
    cvelistv5