CVE-2019-8449
The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure…
published September 11, 2019
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.7th percentile for exploit probability.
What it is
The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.84771 · 99.7th percentile
- Published
- 2019-09-11T13:56Z
EPSS history
Timeline