CVE-2022-39960

The Netic Group Export add-on before 1.0.3 for Atlassian Jira does not perform authorization checks

published September 17, 2022

CVSS
—
EPSS
26%
Percentile
98.0
In the wild
Unconfirmed
What it is

The Netic Group Export add-on before 1.0.3 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all groups from the Jira instance by making a groupexport_download=true request to a plugins/servlet/groupexportforjira/admin/ URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.25680 · 98.0th percentile
Published
2022-09-17T17:49Z
EPSS history
Timeline
  • 17 SEP 17:49Z
    The Netic Group Export add-on before 1.0.3 for Atlassian Jira does not perform authorization checks
    cvelistv5