Vulnerability Details CVE-2022-39960
The Netic Group Export add-on before 1.0.3 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all groups from the Jira instance by making a groupexport_download=true request to a plugins/servlet/groupexportforjira/admin/ URI.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.736
EPSS Ranking 98.7%
CVSS Severity
CVSS v3 Score 5.3
References
Products affected by CVE-2022-39960
-
cpe:2.3:a:netic:group_export:-
-
cpe:2.3:a:netic:group_export:1.0.1