p PatchFirst

CVE-2026-115975

CVE-2026-115975 · Broken access control in JiraController

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Broken access control in JiraController in Cervantes version v1.3-beta could allow an attacker to create, edit, or delete Jira tickets for vulnerabilities in other projects

CVSS 7.1 · High · EPSS 0.2%

Published
Updated

Affected products and versions

  • cervantes

    Versions
    • ≥ alpha 0.3, ≤ 1.3-beta: Affected (custom)
    • v.1.4.0-beta: Not affected

    No fix published

Original sources

Check your server →