Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for…
Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projects
Read at NIST National Vulnerability Database (CVE API 2.0)
- Vendor
- Atlassian
- Product
- jira
- CVSS
- 7.1
- EPSS
- 0.002 (p12)
- Exposure class
- Collaboration
Why it ranks 21 (Routine)
- CVSS 7.1 high
- Product class: collaboration
- Widely deployed vendor product (Atlassian)
- Recency: items published within 24 hours gain 15, within 72 hours 6, within 7 days 2.