According to its self-reported version number, the Atlassian Jira Service Desk application running on the remote host is version 4.8.x prior to 4.12.0. It is, therefore, affected by a flaw which may permit a remote attacker authenticated as a non-administrator user to view Project Request-Types and Descriptions, via an Information Disclosure vulnerability in the editform request-type-fields resource.nn Note that the scanner has not tested for these issues but has instead relied only on the application’s self-reported version number.Read More
Atlassian Jira Service Desk 4.8.1 < 4.12.0 Information Disclosure In API and Integrations
