Unlock new dimensions!

Deutsch

Bugcrowd issues

[Bugcrowd] Stored XSS via Latex Input

Stored XSS via link with Word file leads to leaks JWT token

Mykhailo Iereshchenko

Andrzej Kaliciecki

Mask sensitive webhook data in the Activity tab

External Share for Jira

[Bugcrowd] Bypass password protection to subscribe for a share

Mariusz Szymański

Daniel Stefaniak

[Bugcrowd] JSM customers can get title of any issue containing any approval on the instance

External Share for Jira

[Bugcrowd] Jira users can get comments from issues that they have no access to

Mykhailo Iereshchenko

External Share for Jira

[Bugcrowd] Anyone who knows a Workspace name, can deny SSO authentication for any Workspace

Mariusz Szymański

Daniel Stefaniak

JiraSSObugcrowd

External Share for Confluence

Open redirect at https://confluence.external-share.com/

Jakub Myśliński

Andrzej Kaliciecki

[Bugcrowd] Stored XSS on app domain via old mermaid library

[Bugcrowd] JSM customers can delete any approval

[Bugcrowd] JSM customers can get SMTP credentials and titles of all issues with approvals

[Bugcrowd] JSM customers can get internal secrets via definitions

[Bugcrowd] JSM customers can override "JSM public comments enabled" setting and get comments

External Share for Jira

[Bugcrowd] Jira users can get titles of issues they do not have access to

Miłosz Jaskólski

Daniel Stefaniak

PDF Export for Jira

[Bugcrowd] JSM customers can get internal notes via the app

Krzysztof Surdacki

Stored XSS via Mermaid rendering in Macro Pack

Stored XSS via Swagger in Macro Pack

Stored XSS via text in Macro Pack

Miłosz Jaskólski

External Share for Confluence

Stored XSS on search bar in External Share for Confluence

Michał Szkrabko

External Share for Confluence

Stored XSS on page tree in External Share for Confluence

Michał Szkrabko

Contract Signatures

Unauthorized Access gained from Jira Service Desk customer.account.session.token

Krzysztof Surdacki

Polina Naumenko

bugcrowdsecurity_vulneribility

External Share for Jira

Unauthorized Modification of Board Card Settings

Polina Naumenko

bugcrowdsecurity_vulneribility

External Share for Jira

Stored XSS in Project Field at Share Settings Panel

Bearbeiter: Nicht zugewiesen

Polina Naumenko

XSSbugcrowdsecurity_vulneribility

Unauthorized edition of private space definitions

External Share for Confluence

VAPT Report for Warsaw Dynamics

Krzysztof Bogdan

Krzysztof Bogdan

External Share for Jira

TCP Port Enumeration Vulnerability in Custom Email feature of External Share Plugin for Jira Cloud

Mariusz Szymański

Mariusz Szymański

External Share for Jira

Reflected XSS in "Summary" Parameter on External Share Plugin for JIRA

Michał Szkrabko

Michał Szkrabko

External Share for Jira

Unauthorized Issue Description Modification via External Share Plugin for JIRA

Michał Szkrabko

Michał Szkrabko

Contract Signatures

Authentication Bypass using Jira Service Management

Krzysztof Surdacki

Krzysztof Surdacki

External Share for Confluence

[CSRF][Secuirity] External share confluence leads to add comments arbitrarily behalf of the admin.

Krzysztof Bogdan

External Share for Confluence

[XSS][USERNAME] - XSS issue occurs if filtering for a user with the "><img src=x onerror=alert(1)>"

External Share for Jira

Add check csrf to forms

Krzysztof Bogdan

Krzysztof Bogdan

External Share for Confluence

Add csrf check to forms

Krzysztof Bogdan

Krzysztof Bogdan

Apply resource & rate limit for api

Krzysztof Bogdan

Krzysztof Bogdan

External Share for Jira

Apply resource & rate limit for api

Krzysztof Bogdan

Krzysztof Bogdan

External Share for Confluence

Apply resource & rate limit for api

Krzysztof Bogdan

Krzysztof Bogdan

Weitere Arbeitselemente werden geladen…

36 von 36