CVE-2015-8481
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Atlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer attaches the wrong image to e-mail notifications when a user views an issue with inline wiki markup referencing an image attachment, which might allow remote attackers to obtain sensitive information by updating a different issue that includes wiki markup for an external image reference.
Atlassian JIRA Software 7.0.3, JIRA Core 7.0. 3 y el instalador de paquete JIRA Service Desk 3.0.3 anexa la imagen incorrecta a notificaciones de correo cuando un usuario ve un problema con el wikitexto en línea que hace referencia a una imagen adjunta, lo que podría permitir a atacantes remotos obtener información sensible actualizando un problema diferente que incluye wikitexto para una referencia de imagen externa.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2015-12-07 CVE Reserved
- 2016-01-08 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (3)
URL | Tag | Source |
---|---|---|
http://www.securityfocus.com/bid/79381 | Vdb Entry |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://confluence.atlassian.com/jira/jira-security-advisory-2015-12-09-792307790.html | 2022-03-28 | |
https://jira.atlassian.com/browse/JRA-47557 | 2022-03-28 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Atlassian Search vendor "Atlassian" | Jira Core Search vendor "Atlassian" for product "Jira Core" | 7.0.3 Search vendor "Atlassian" for product "Jira Core" and version "7.0.3" | - |
Affected
| ||||||
Atlassian Search vendor "Atlassian" | Jira Server Search vendor "Atlassian" for product "Jira Server" | 7.0.3 Search vendor "Atlassian" for product "Jira Server" and version "7.0.3" | - |
Affected
| ||||||
Atlassian Search vendor "Atlassian" | Jira Service Desk Search vendor "Atlassian" for product "Jira Service Desk" | 3.0.3 Search vendor "Atlassian" for product "Jira Service Desk" and version "3.0.3" | - |
Affected
|