VYPR
← All advisories
Unrated severityNVD Advisory· Published Feb 6, 2020· Updated Sep 17, 2024

CVE-2019-20106

CVE-2019-20106

Description

Comment properties in Atlassian Jira Server and Data Center before version 7.13.12, from 8.0.0 before version 8.5.4, and 8.6.0 before version 8.6.1 allows remote attackers to make comments on a ticket to which they do not have commenting permissions via a broken access control bug.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Atlassian/Crowd Data Center and Serverllm-fuzzy2 versions
    <7.13.12, >=8.0.0 <8.5.4, >=8.6.0 <8.6.1+ 1 more
    • (no CPE)range: <7.13.12, >=8.0.0 <8.5.4, >=8.6.0 <8.6.1
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.