diff --git a/cves/2019/CVE-2019-8446.yaml b/cves/2019/CVE-2019-8446.yaml index 15cefe3b75..dbddb27ac5 100644 --- a/cves/2019/CVE-2019-8446.yaml +++ b/cves/2019/CVE-2019-8446.yaml @@ -2,9 +2,10 @@ id: CVE-2019-8446 info: name: Jira Improper Authorization + description: The /rest/issueNav/1/issueTable resource in Jira before version 8.3.2 allows remote attackers to enumerate usernames via an incorrect authorisation check. author: dhiyaneshDk severity: medium - tags: jira,cve2019 + tags: cve,cve2019,jira requests: - raw: @@ -18,7 +19,8 @@ requests: Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 - {'jql':'project in projectsLeadByUser("g147isalive")'} + {'jql':'project in projectsLeadByUser("{{randstr}}")'} + matchers-condition: and matchers: - type: word diff --git a/workflows/jira-workflow.yaml b/workflows/jira-workflow.yaml index 0365e66040..699e8e9471 100644 --- a/workflows/jira-workflow.yaml +++ b/workflows/jira-workflow.yaml @@ -6,9 +6,6 @@ info: description: A simple workflow that runs all Jira related nuclei templates on a given target. tags: workflow - # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0) - # Old workflows still remains valid, and will be working with all nuclei versions. - workflows: - template: exposed-panels/jira-detect.yaml @@ -19,6 +16,7 @@ workflows: - template: cves/2019/CVE-2019-3396.yaml - template: cves/2019/CVE-2019-3402.yaml - template: cves/2019/CVE-2019-8442.yaml + - template: cves/2019/CVE-2019-8446.yaml - template: cves/2019/CVE-2019-8449.yaml - template: cves/2019/CVE-2019-8451.yaml - template: cves/2019/CVE-2019-11581.yaml