VYPR
← All advisories
Low severity3.1NVD Advisory· Published Jan 8, 2016· Updated Jun 17, 2026

CVE-2015-8481

CVE-2015-8481

Description

Atlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer attaches the wrong image to e-mail notifications when a user views an issue with inline wiki markup referencing an image attachment, which might allow remote attackers to obtain sensitive information by updating a different issue that includes wiki markup for an external image reference.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Atlassian/Jira Core2 versions
    cpe:2.3:a:atlassian:jira_core:7.0.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:atlassian:jira_core:7.0.3:*:*:*:*:*:*:*
    • (no CPE)range: 7.0.3
  • Atlassian/Jira Server
    cpe:2.3:a:atlassian:jira_server:7.0.3:*:*:*:*:*:*:*
  • Atlassian/Jira Service Desk2 versions
    cpe:2.3:a:atlassian:jira_service_desk:3.0.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:atlassian:jira_service_desk:3.0.3:*:*:*:*:*:*:*
    • (no CPE)range: 3.0.3
  • Atlassian/JIRA Softwarellm-fuzzy
    Range: 7.0.3

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.