| Package | Affected versions | Patched versions |
|---|---|---|
| jira data center | ≥ 7.13.0, < 8.5.5 | 8.5.5 |
| jira server | > 7.13.0, < 8.5.5 | 8.5.5 |
The API in Atlassian Jira Server and Data Center before version 8.6.0 allows remote attackers to determine if a Jira project key exists or not via an information disclosure vulnerability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free