medium4.3
CVE-2018-20826
The inline-create rest resource in Jira before version 7.12.3 allows authenticated remote attackers to set the reporter in issues via a missing authorisation c…
Impact
The inline-create rest resource in Jira before version 7.12.3 allows authenticated remote attackers to set the reporter in issues via a missing authorisation check.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Jira | before 7.12.3 |