CVE-2023-30285

Summary

CVE-2023-30285 is a vulnerability affecting Deviniti Issue Sync Synchronization version 3.5.2 for Jira. This issue enables attackers to manipulate requests to the /rest/synchronizer/1.0/technicalUser endpoint, gaining unauthorized access to a user's login credentials. Successful exploitation may lead to unauthorized access and potential data breaches. Users are strongly advised to update their systems to mitigate this risk. Attackers can exploit this vulnerability by sending a crafted request, bypassing authentication checks and obtaining sensitive user information.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.