CVE-2019-8449

This exploit leverages an information disclosure vulnerability in Jira (CVE-2019-8449) to enumerate usernames via an unauthenticated API endpoint. It sends a crafted GET request to the `/rest/api/latest/groupuserpicker` endpoint with user-controlled parameters to retrieve user details.

This PoC exploits CVE-2019-8449, an information disclosure vulnerability in Jira versions 2.1 to 8.3.4, allowing unauthenticated attackers to enumerate usernames via the `/rest/api/latest/groupuserpicker` endpoint. The script sends a crafted GET request with user-controlled parameters to retrieve sensitive user data.

This Go script exploits CVE-2019-8449, a user enumeration vulnerability in Jira versions before 8.4.0. It queries the `/rest/api/latest/groupuserpicker` endpoint with crafted parameters to check if a username exists.