Medium severity5.3NVD Advisory· Published Sep 11, 2019· Updated Jun 17, 2026

CVE-2019-14995

Description

The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an attachment with a specific name exists and if an issue key is valid via a missing permissions check.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Atlassian/Jira Server
cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*
Range: >=7.6.0,<8.4.0
Atlassian/Jirallm-fuzzy2 versions
<8.4.0+ 1 more
- (no CPE)range: <8.4.0
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

www.talosintelligence.com/vulnerability_reports/TALOS-2019-0836nvdExploitThird Party Advisory
www.talosintelligence.com/vulnerability_reports/TALOS-2019-0837nvdExploitThird Party Advisory
jira.atlassian.com/browse/JRASERVER-69792nvdIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000