Security Advisory

CVE-2019-8442

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-05-22 17:39:14

Last updated 2024-09-16 17:58:53

Assigner atlassian

CVSS score not scored

State PUBLISHED

Description

The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to access files in the Jira webroot under the META-INF directory via a lax path access check.

← Browse all CVEs View on cve.org ↗