Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0 before 8.4.2.

Remediation

References

CVE-2019-20410

Related Vulnerabilities

PHP POST file upload buffer overflow vulnerabilities

WordPress Plugin All in One Social Lite Server-Side Request Forgery (1.0)

WordPress Plugin Simple Ads Manager Multiple Vulnerabilities (2.6.96)

WordPress Plugin ManageWP Worker Unspecified Vulnerability (4.1.7)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-5833)

Severity

Medium

Classification

CVE-2019-20410

Tags

Missing Update Known Vulnerabilities