medium5.3
CVE-2019-8445
Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote attackers to view worklog time informati…
Impact
Several worklog rest resources in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.2 allow remote attackers to view worklog time information via a missing permissions check.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Atlassian | Jira Server | from 7.13.0 before 7.13.7 from 8.0.0 before 8.3.2 |