References https://nvd.nist.gov/vuln/detail/CVE-2019-8449 https://jira.atlassian.com/browse/JRASERVER-69796 https://github.com/mufeedvh/CVE-2019-8449 https://www.rapid7.com/db/vulnerabilities/atlassian-jira-cve-2019-8449/ https://www.exploit-db.com/exploits/47990 https://www.acunetix.com/vulnerabilities/web/atlassian-jira-missing-authentication-for-critical-function-vulnerability-cve-2019-8449/ https://pentest-tools.com/vulnerabilities-exploits/jira-840-information-disclosure_2560 https://www.tenable.com/plugins/nessus/128423 https://vulners.com/cve/CVE-2019-8449
Related VulnerabilitiesPoCCVE-2026-26265: Discourse - Private User Field Disclosure via Directory Items IDORPoCCVE-2026-27454: Discourse <=2026.2.0 - Hidden Post Revision Disclosure via revert_to Authorization BypassPoCCVE-2026-81199: MasterStudy LMS < 3.7.46 - Unauthenticated Student Statistics DisclosurePoCCVE-2026-87820: CyberPanel 2.4.3-2.4.5 - AI Scanner Debug DisclosurePoCCVE-2017-8225: GoAhead Camera - Credential DisclosurePoCCVE-2026-55229: Gotenberg < 8.34.0 - Local File DisclosurePoCCVE-2025-53887: Directus < 11.9.0 - Version DisclosurePoCCVE-2026-42878: FacturaScripts - Unauthenticated phpinfo DisclosurePoCCVE-2026-0717: LottieFiles for Gutenberg <= 3.0.0 - Unauthenticated Settings DisclosurePoCCVE-2026-11801: WPAdverts <= 2.3.2 - Information DisclosurePoCCVE-2026-8236: Concrete CMS <9.5.1 - Unauthenticated File-Usage Internal Metadata DisclosurePoCCVE-2026-57219: RabbitMQ Management - OAuth 2 Client Secret DisclosurePoCCVE-2026-8237: Concrete CMS <= 9.5.0 - Unauthenticated Conversation Message Disclosure (IDOR)