atlassian Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/atlassian/ Sun, 26 Feb 2023 09:11:44 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png atlassian Archives - CVE Vulnerability https://cvevulnerability.com/cve_products/atlassian/ 32 32 CVE-2008-6832 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6832/ Sun, 26 Feb 2023 09:11:44 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6832/ Cross-site request forgery (CSRF) vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-6832 appeared first on CVE Vulnerability.

]]> Cross-site request forgery (CSRF) vulnerability in Atlassian JIRA Enterprise Edition 3.13 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

The post CVE-2008-6832 appeared first on CVE Vulnerability.

]]> CVE-2008-6831 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-6831/ Sun, 26 Feb 2023 09:11:43 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-6831/ Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA Enterprise Edition 3.13 allow remote attackers to inject arbitrary web script or HTML via the (1) fullname (Full Name) parameter in the ViewProfile page or (2) returnUrl parameter in a form, as demonstrated using secure/AddComment!default.jspa (aka “Add Comment”).

The post CVE-2008-6831 appeared first on CVE Vulnerability.

]]> Multiple cross-site scripting (XSS) vulnerabilities in Atlassian JIRA Enterprise Edition 3.13 allow remote attackers to inject arbitrary web script or HTML via the (1) fullname (Full Name) parameter in the ViewProfile page or (2) returnUrl parameter in a form, as demonstrated using secure/AddComment!default.jspa (aka “Add Comment”).

The post CVE-2008-6831 appeared first on CVE Vulnerability.

]]> CVE-2019-20406 https://cvevulnerability.com/cve_vulnerabilities/cve-2019-20406/ Sun, 26 Feb 2023 06:32:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2019-20406/ The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, and from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to write a DLL file in a directory in the global path environmental variable variable to inject code & escalate their privileges via a DLL hijacking […]

The post CVE-2019-20406 appeared first on CVE Vulnerability.

]]> The usage of Tomcat in Confluence on the Microsoft Windows operating system before version 7.0.5, and from version 7.1.0 before version 7.1.1 allows local system attackers who have permission to write a DLL file in a directory in the global path environmental variable variable to inject code & escalate their privileges via a DLL hijacking vulnerability.

The post CVE-2019-20406 appeared first on CVE Vulnerability.

]]>