漏洞描述
Atlassian Jira 8.4.0之前版本/rest/api/latest/groupuserpicker接口允许远程攻击者枚举用户名，导致信息泄露。
Atlassian Jira信息泄露漏洞(CVE-2019-8449)
PoC代码
暂无相关漏洞推荐
-
CVE-2019-11581: Atlassian Jira未授权服务端模板注入漏洞 POC
2025-09-01 | Atlassian JiraJira Server and Data Center is susceptible to a server-side template injection vulnerability via the... -
CVE-2019-8442: Atlassian Jira webroot leak POC
2025-09-01 | Atlassian JiraAtlassian Jira是澳大利亚Atlassian公司的一套缺陷跟踪管理系统。该系统主要用于对工作中各类问题、缺陷进行跟踪管理。 Atlassian Jira 7.13.4之前版本、8.0.4之... -
CVE-2022-0540: Atlassian Jira - Authentication bypass in Seraph POC
2025-09-01 | Atlassian JiraA vulnerability in Jira Seraph allows a remote, unauthenticated attacker to bypass authentication b... -
CVE-2019-0193: Apache Solr Remote Code Execution POC
2025-09-01 | Apache Solr2019 年 08 月 01 日，Apache Solr 官方发布预警，Apache Solr DataImport 功能 在开启 Debug 模式时，可以接收来自请求的”dataConfig”参数，... -
CVE-2019-0230: Apache Struts <=2.5.20 - Remote Code Execution S2-059 POC
2025-09-01 | Apache StrutsApache Struts 2.0.0 to 2.5.20 forced double OGNL evaluation when evaluated on raw user input in tag ...