Unrated severityNVD Advisory· Published Sep 11, 2019· Updated Sep 16, 2024

CVE-2019-14995

Description

The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an attachment with a specific name exists and if an issue key is valid via a missing permissions check.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Jirallm-fuzzy2 versions
<8.4.0+ 1 more
- (no CPE)range: <8.4.0
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

jira.atlassian.com/browse/JRASERVER-69792mitrex_refsource_CONFIRM
www.talosintelligence.com/vulnerability_reports/TALOS-2019-0836mitrex_refsource_MISC
www.talosintelligence.com/vulnerability_reports/TALOS-2019-0837mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000