📦 Jira Server

This vulnerability allows remote unauthenticated attackers to bypass Servlet Filters in multiple Atlassian products, potentially leading to authentication bypass and cross-site scripting attacks. Orga...

This is a high-severity remote code execution vulnerability in Confluence Data Center and Server that allows authenticated attackers to execute arbitrary code on affected systems. It affects Confluenc...

This vulnerability allows remote attackers with system administrator permissions in Atlassian Jira Server and Data Center to execute arbitrary code via template injection in the Email Templates featur...

This vulnerability allows remote attackers with administrator privileges in Atlassian Jira Server and Data Center to execute arbitrary code via the Email Templates feature. It affects versions before ...

This vulnerability allows unauthenticated remote attackers to view names of private projects and filters in Atlassian Jira Server and Data Center via an Insecure Direct Object Reference (IDOR) in the ...

This vulnerability allows anonymous remote attackers to view cached content in Atlassian Jira Server and Data Center even after losing proper permissions. It affects organizations running vulnerable v...

This Broken Authentication vulnerability in Atlassian Jira allows remote attackers to bypass firewall protections for app-linked resources via the makeRequest gadget. Attackers can access internal res...

This CVE describes a Cross-Site Request Forgery (CSRF) vulnerability in Atlassian Jira, where the login form lacks a CSRF token, allowing attackers to trick users into logging into an attacker-control...