漏洞标题
N/A
漏洞描述信息
在 Atlassian Jira Service Desk Server 和 Jira Service Desk Data Center 的 3.9.17 之前、3.16.10 之前、4.0.0 之前、4.2.6 之前、4.3.5 之前、4.4.3 之前、4.5.1 之前，通过路径遍历漏洞允许远程攻击者通过 portal 访问的 Jira Service Desk 项目查看任意问题。请注意，当“任何人都可以在 portal 上电子邮件 service desk 或在 portal 上发起请求”设置被启用时，攻击者可以给自己赋予 portal 访问权限，从而利用该漏洞。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 before 4.2.6, from 4.3.0 before 4.3.5, from 4.4.0 before 4.4.3, and from 4.5.0 before 4.5.1 allows remote attackers with portal access to view arbitrary issues in Jira Service Desk projects via a path traversal vulnerability. Note that when the 'Anyone can email the service desk or raise a request in the portal' setting is enabled, an attacker can grant themselves portal access, allowing them to exploit the vulnerability.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Atlassian Jira Service Desk Server和Atlassian Jira Service Desk Data Center Customer Context Filter 路径遍历漏洞
漏洞描述信息
Atlassian Jira Service Desk Server和Atlassian Jira Service Desk Data Center都是澳大利亚Atlassian（Atlassian）公司的产品。Atlassian Jira Service Desk Server是一套IT服务台与请求跟踪系统的服务器版。该系统主要用于接收、跟踪和管理团队客户的请求。Atlassian Jira Service Desk Data Center是Atlassian Jira Service Desk的数据中
CVSS信息
N/A
漏洞类别
路径遍历