Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Information Disclosure via QueryCompenentRenderer API - Vulnerability Database
Atlassian Jira

Information Disclosure via QueryCompenentRenderer API

High
Reference: No Reference
Title: Information Disclosure via QueryCompenentRenderer API
Overview:

Affected versions of Atlassian Jira Server and Data Centre allowed an unauthenticated remote attacker to fetch IssueProject and Sprint information via Information Disclosure Vulnerability via /secure/QueryComponentRendererValueDefault.jspa endpoint.