| Package | Affected versions | Patched versions |
|---|---|---|
| jira | = 3.6.2_156 |
secure/ConfigureReleaseNote.jspa in Atlassian JIRA 3.6.2-#156 allows remote attackers to obtain sensitive information via unspecified manipulations of the projectId parameter, which displays the installation path and other system information in an error message.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free