Security Advisory

CVE-2021-39118

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-09-14 04:55:09
Last updated 2024-10-10 15:29:16
Assigner atlassian
State PUBLISHED

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to discover the usernames and full names of users via an enumeration vulnerability in the /rest/api/1.0/render endpoint. The affected versions are before version 8.19.0.