Skip to content

/ CVE-2019-8449

CVE-2019-8449 Exploit for Jira v2.1 - v8.3.4
cve cve-2019-8449 exploit exploits exploit-code exploiting-vulnerabilities exploit-database exploitdb vulnerability jira jira-rest-api jira-api jira-issue cve-exploit
Python
  1. Python 100.0%
Branch: master
Find file
Clone or download

Clone with HTTPS

Use Git or checkout with SVN using the web URL.

Open in Desktop Download ZIP

Launching GitHub Desktop

If nothing happens, download GitHub Desktop and try again.

Launching GitHub Desktop

If nothing happens, download GitHub Desktop and try again.

Launching Xcode

If nothing happens, download Xcode and try again.

Launching Visual Studio

If nothing happens, download the GitHub extension for Visual Studio and try again.

@mufeedvh
mufeedvh Added the exploit-db link
Latest commit 899cc2f Feb 4, 2020
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
CVE-2019-8449.py indentation too wide? Feb 2, 2020
README.md Added the exploit-db link Feb 3, 2020

README.md

CVE-2019-8449

CVE-2019-8449 Exploit for Jira Releases Below v8.3.4

CVSS Score: 5.0
Vulnerability Type(s): Information Disclosure
Authentication: Not Required
Affected Versions: 2.1 - 8.3.4
Publish Date: 2019-09-11
Exploit-DB: https://www.exploit-db.com/exploits/47990

Description

The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability.

Usage

python CVE-2019-8449.py

Links

You can’t perform that action at this time.