CVE-2019-3403
30Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 53%
exploitation probability
53%top 1% of all CVEs
observed exploitation
nono source reports it
The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.
Affected products
Atlassian · Jira