CVE-2019-14995CWE-863

The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an attachment with a specific name exists and…

published September 11, 2019

CVSS
—
EPSS
3%
Percentile
87.3
In the wild
Unconfirmed
What it is

The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an attachment with a specific name exists and if an issue key is valid via a missing permissions check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03012 · 87.3th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2019-09-11T13:56Z
EPSS history
Timeline
  • 11 SEP 13:56Z
    The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an attachment with a specific name exists and…
    cvelistv5