CVE-2019-3399

CVE-2019-3399

Vendor Atlassian
Product Jira
Weakness CWE-863 · Incorrect authorization
Published April 30, 2019
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The BrowseProjects.jspa resource in Jira before version 7.13.2, and from version 8.0.0 before version 8.0.2 allows remote attackers to see information for archived projects through a missing authorisation check.

Key dates

02Disclosure timeline

April 30, 2019 CVE published
September 16, 2024 Record updated