Description
Atlassian Jira 8.4.0之前版本/rest/api/latest/groupuserpicker接口允许远程攻击者枚举用户名，导致信息泄露。
Atlassian Jira信息泄露漏洞(CVE-2019-8449)
PoC
None yet. Search at https://trap.biu.life/?ref=rssAtlassian Jira 8.4.0之前版本/rest/api/latest/groupuserpicker接口允许远程攻击者枚举用户名，导致信息泄露。
None yet. Search at https://trap.biu.life/?ref=rss