From 098d3157e52d541a3ddd0f44d718e6dbcd77731f Mon Sep 17 00:00:00 2001 From: Noam Rathaus Date: Tue, 6 Apr 2021 13:27:39 +0300 Subject: [PATCH] Relevant reference --- cves/2019/CVE-2019-3403.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/cves/2019/CVE-2019-3403.yaml b/cves/2019/CVE-2019-3403.yaml index faba3bba21..e554d89a9c 100644 --- a/cves/2019/CVE-2019-3403.yaml +++ b/cves/2019/CVE-2019-3403.yaml @@ -5,7 +5,7 @@ info: author: Ganofins severity: medium description: The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attackers to enumerate usernames via an incorrect authorisation check. - reference: https://nvd.nist.gov/vuln/detail/CVE-2019-3403 + reference: https://jira.atlassian.com/browse/JRASERVER-69242 tags: cve,cve2019,atlassian,jira requests: