CVE-2019-3399CWE-863

The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for…

published April 30, 2019

CVSS
—
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for archived projects through a missing authorisation check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02050 · 81.1th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2019-04-30T15:28Z
EPSS history
Timeline
  • 30 APR 15:28Z
    The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for…
    cvelistv5