Vulnerability Database

289,782

Total vulnerabilities in the database

CVE-2015-8481

Atlassian JIRA Software 7.0.3, JIRA Core 7.0.3, and the bundled JIRA Service Desk 3.0.3 installer attaches the wrong image to e-mail notifications when a user views an issue with inline wiki markup referencing an image attachment, which might allow remote attackers to obtain sensitive information by updating a different issue that includes wiki markup for an external image reference.

  • Published: Jan 8, 2016
  • Updated: Apr 13, 2023
  • CVE: CVE-2015-8481
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 3.1
  • AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

CVSS v2:

  • Severity: Low
  • Score: 3.5
  • AV:N/AC:M/Au:S/C:P/I:N/A:N

CWEs:

Software From Fixed in
atlassian / jira_core 7.0.3 7.0.3.x
atlassian / jira_server 7.0.3 7.0.3.x
atlassian / jira_service_desk 3.0.3 3.0.3.x