| Package | Affected versions | Patched versions |
|---|---|---|
| issue sync | < 3.5.2 | 3.5.2 |
An issue in Deviniti Issue Sync Synchronization v3.5.2 for Jira allows attackers to obtain the login credentials of a user via a crafted request sent to /rest/synchronizer/1.0/technicalUser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free