Lucene search

K
hackeroneLesleybwH1:1352461
HistorySep 27, 2021 - 2:44 p.m.

OneWeb: Vulnerable Jira Instance

2021-09-2714:44:08
lesleybw
hackerone.com
215
oneweb
jira
vulnerabilities
information exposure
apis
system browser
cves
bug bounty

EPSS

0.308

Percentile

97.0%

Multiple information exposure vulnerabilites were identified in a Jira Server instance (unauthenticated access to APIs and system browser functions).
@lesleybw found multiple CVEs and exposures on a Jira instance owned by OneWeb 1