VULNERABILITY INTELLIGENCE

CVE-2017-18101

CVSS score6.5 MEDIUM

EPSS probability1.19%

CISA KEVNot currently listed

Published2018-04-10

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

Various administrative external system import resources in Atlassian JIRA Server (including JIRA Core) before version 7.6.5, from version 7.7.0 before version 7.7.3, from version 7.8.0 before version 7.8.3 and before version 7.9.0 allow remote attackers to run import operations and to determine if an internal service exists through missing permission checks.

Weakness classification

CWE-284: Improper Access Control
CWE-862: Missing Authorization

Primary references

security@atlassian.com — Broken Link
security@atlassian.com — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Broken Link
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory