CVE-2019-3403
MEDIUM NUCLEIJira < 7.13.3, 8.0.0-8.0.3, 8.1.0 - Unauthenticated Username Enumeration via User Picker REST Endpoint
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2019-3403. PoCs published by davidmckennirey, und3sc0n0c1d0. A Nuclei detection template is also available.
AI-analyzed exploit summary This PoC exploits CVE-2019-3403, an information disclosure vulnerability in JIRA, to scrape user information via an unauthenticated API endpoint. It sends queries to the `/rest/api/2/user/picker` endpoint and processes the responses to extract user details.
Description
The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check.
Exploits (2)
This PoC exploits CVE-2019-3403, an information disclosure vulnerability in JIRA, to scrape user information via an unauthenticated API endpoint. It sends queries to the `/rest/api/2/user/picker` endpoint and processes the responses to extract user details.
The repository contains a working PoC for CVE-2020-14181, an information disclosure vulnerability in Jira. The script enumerates valid usernames by checking responses from the ViewUserHover.jspa endpoint.
Nuclei Templates (1)
http.component:"Atlassian Jira" || http.component:"atlassian jira" || http.component:"atlassian confluence" || cpe:"cpe:2.3:a:atlassian:jira"
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N