Unrated severityNVD Advisory· Published May 22, 2019· Updated Sep 16, 2024
CVE-2019-8442
CVE-2019-8442
Description
The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to access files in the Jira webroot under the META-INF directory via a lax path access check.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securityfocus.com/bid/108460mitrevdb-entryx_refsource_BID
- jira.atlassian.com/browse/JRASERVER-69241mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.