Description

REST API in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to enumerate usernames via a Sensitive Data Exposure vulnerability in the `/rest/api/latest/user/avatar/temporary` endpoint.

Remediation

References

CVE-2021-26081

Related Vulnerabilities

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce SQL Injection (4.3.0)

MySQL Other Vulnerability (CVE-2007-6304)

WordPress Plugin Multisite Post Duplicator Cross-Site Request Forgery (0.9.5.1)

WordPress Plugin Ultimate Responsive Image Slider Unspecified Vulnerability (3.3.2)

WordPress Plugin Genesis Columns Advanced Cross-Site Scripting (2.0.3)

Severity

Medium

Classification

CVE-2021-26081

Tags

Missing Update Known Vulnerabilities