CVE-2022-38367

5.3 mediumEPSS 0.5%

The Netic User Export add-on before 2.0.6 for Atlassian Jira does not perform authorization checks. This might allow an unauthenticated user to export all users from Jira by making an HTTP request to the affected endpoint.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 44% of CVEs (scores of 2026-10-31)
CWE: CWE-862
Published: 2022-09-05
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

netic:user_export_for_jira

References

https://gist.github.com/CveCt0r/72a0b6292cd8d80499cf5971ae58147f
https://marketplace.atlassian.com/apps/1220535/user-export-for-jira
https://gist.github.com/CveCt0r/72a0b6292cd8d80499cf5971ae58147f
https://marketplace.atlassian.com/apps/1220535/user-export-for-jira

Check your stack JSON