Vulnerabilities > Atlassian > Jira Server > 8.3.3

DATE CVE VULNERABILITY TITLE RISK
2019-09-11 CVE-2019-14998 Cross-Site Request Forgery (CSRF) vulnerability in Atlassian Jira Server
The Webwork action Cross-Site Request Forgery (CSRF) protection implementation in Jira before version 8.4.0 allows remote attackers to bypass its protection via "cookie tossing" a CSRF cookie from a subdomain of a Jira instance.
network
low complexity
atlassian CWE-352
6.5
2019-09-11 CVE-2019-14997 Unspecified vulnerability in Atlassian Jira Server
The AccessLogFilter class in Jira before version 8.4.0 allows remote anonymous attackers to learn details about other users, including their username, via an information expose through caching vulnerability when Jira is configured with a reverse Proxy and or a load balancer with caching or a CDN.
network
low complexity
atlassian
4.3
2019-09-11 CVE-2019-14995 Missing Authorization vulnerability in Atlassian Jira Server
The /rest/api/1.0/render resource in Jira before version 8.4.0 allows remote anonymous attackers to determine if an attachment with a specific name exists and if an issue key is valid via a missing permissions check.
network
low complexity
atlassian CWE-862
5.3