← CVE Intelligence

CVE-2019-8442

Atlassian / Jira PUBLISHED

Description (CNA)

The CachingResourceDownloadRewriteRule class in Jira before version 7.13.4, and from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to access files in the Jira webroot under the META-INF directory via a lax path access check.

Affected (CNA)

Vendor / productVersions
Atlassian / Jiraaffected unspecified before 7.13.4; affected 8.0.0 before unspecified; affected unspecified before 8.0.4; affected 8.1.0 before unspecified; affected unspecified before 8.1.1

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.