CVE-2018-13391

CVE-2018-13391: vulnerability in Atlassian Jira

Published · Updated

Follow this CVE+ Monitor Jira

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.9%
The ProfileLinkUserFormat component of Jira Server before version 7.6.8, from version 7.7.0 before version 7.7.5, from version 7.8.0 before version 7.8.5, from version 7.9.0 before version 7.9.3, from version 7.10.0 before version 7.10.3 and from version 7.11.0 before version 7.11.2 allows remote attackers who can access & view an issue to obtain the email address of the reporter and assignee user of an issue despite the configured email visibility setting being set to hidden.
Affected products
Atlassian · Jira
Related CVEs — Atlassian Jira

In the same product, most dangerous first.

CVE-2019-8451—CVE-2019-8451EPSS 94.5%CVE-2019-8449—CVE-2019-8449EPSS 85.7%CVE-2019-8442—CVE-2019-8442EPSS 59.8%CVE-2019-3403—CVE-2019-3403EPSS 53.6%CVE-2018-20824—CVE-2018-20824EPSS 38.0%CVE-2018-5230—CVE-2018-5230EPSS 37.0%