CVE-2019-8449
MEDIUM NUCLEIJira < 8.4.0 - Information Disclosure via Group User Picker Endpoint
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2019-8449. PoCs published by Mufeed VH, mufeedvh, r0lh. A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit leverages an information disclosure vulnerability in Jira (CVE-2019-8449) to enumerate usernames via an unauthenticated API endpoint. It sends a crafted GET request to the `/rest/api/latest/groupuserpicker` endpoint with user-controlled parameters to retrieve user details.
Description
The /rest/api/latest/groupuserpicker resource in Jira before version 8.4.0 allows remote attackers to enumerate usernames via an information disclosure vulnerability.
Exploits (3)
This exploit leverages an information disclosure vulnerability in Jira (CVE-2019-8449) to enumerate usernames via an unauthenticated API endpoint. It sends a crafted GET request to the `/rest/api/latest/groupuserpicker` endpoint with user-controlled parameters to retrieve user details.
This PoC exploits CVE-2019-8449, an information disclosure vulnerability in Jira versions 2.1 to 8.3.4, allowing unauthenticated attackers to enumerate usernames via the `/rest/api/latest/groupuserpicker` endpoint. The script sends a crafted GET request with user-controlled parameters to retrieve sensitive user data.
This Go script exploits CVE-2019-8449, a user enumeration vulnerability in Jira versions before 8.4.0. It queries the `/rest/api/latest/groupuserpicker` endpoint with crafted parameters to check if a username exists.
Nuclei Templates (1)
http.component:"Atlassian Jira" || http.component:"atlassian jira" || http.component:"atlassian confluence" || cpe:"cpe:2.3:a:atlassian:jira"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N