Description

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to view users' emails via an Information Disclosure vulnerability in the /rest/api/2/search endpoint. The affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version 8.14.0 before 8.15.1.

Remediation

References

CVE-2021-39122

Related Vulnerabilities

WordPress Plugin Ultimate FAQ Security Bypass (1.8.24)

WordPress Plugin Custom Login Page Customizer-LoginPress Multiple Vulnerabilities (1.1.13)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4573)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-0798)

WordPress Plugin Docket Cache-Object Cache Accelerator Cross-Site Scripting (21.08.01)

Severity

Medium

Classification

CVE-2021-39122

Tags

Missing Update Known Vulnerabilities