According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.5.12, 8.6.x < 8.13.4 or 8.14.x < 8.15.1. It is, therefore, affected by multiple vulnerabilities:

 - A DOM based Cross-Site Scripting (XSS) vulnerability caused by parameter pollution. (CVE-2020-36288)

 - An information disclosure vulnerability in the error message when presented with an invalid filename allowing remote authenticated attackers to obtain the full path of the Jira application data directory. (CVE-2021-26075)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
112829	Atlassian Jira 8.14.x < 8.15.1 Multiple Vulnerabilities (1/2)	Web App Scanning	Component Vulnerability	7/6/2021	3/14/2023	medium
112827	Atlassian Jira < 8.5.12 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	7/2/2021	3/14/2023	medium
112828	Atlassian Jira 8.6.x < 8.13.4 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	7/2/2021	3/14/2023	medium

Detections

Analytics

Plugins Search

medium

medium

medium