CVEvulnerability
CVE-2023-42361
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-11-07
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-918
Description
Local File Inclusion vulnerability in Midori-global Better PDF Exporter for Jira Server and Jira Data Center v.10.3.0 and before allows an attacker to view arbitrary files and cause other impacts via use of crafted image during PDF export.
Affected configurations
• midori-global better pdf exporter (< 11.0.0)
Related
Weakness · CWE (1)
- CWE-918 Server-Side Request Forgery weakness
References
- https://gccybermonks.com/posts/pdfjira/ Third Party Advisory
- https://marketplace.atlassian.com/apps/5167/better-pdf-exporter-for-jira?tab=versions&hosting=datacenter Product
- https://marketplace.atlassian.com/apps/5167/better-pdf-exporter-for-jira?tab=versions&hosting=server Product
- https://gccybermonks.com/posts/pdfjira/ Third Party Advisory
- https://marketplace.atlassian.com/apps/5167/better-pdf-exporter-for-jira?tab=versions&hosting=datacenter Product
- https://marketplace.atlassian.com/apps/5167/better-pdf-exporter-for-jira?tab=versions&hosting=server Product