VYPR
← All advisories
Medium severity4.3NVD Advisory· Published Aug 3, 2022· Updated Jun 17, 2026

CVE-2022-36800

CVE-2022-36800

Description

Affected versions of Atlassian Jira Service Management Server and Data Center allow remote attackers without the "Browse Users" permission to view groups via an Information Disclosure vulnerability in the browsegroups.action endpoint. The affected versions are before version 4.22.2.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • Atlassian/Jira Service Management2 versions
    cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*+ 1 more
    • cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:data_center:*:*:*range: <4.22.2
    • cpe:2.3:a:atlassian:jira_service_management:*:*:*:*:server:*:*:*range: <4.22.2
  • Atlassian/Jira Service Management Data Center and Serverllm-fuzzy3 versions
    <4.22.2+ 2 more
    • (no CPE)range: <4.22.2
    • (no CPE)range: unspecified
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.