CVE-2019-16908

An issue was discovered in the Infosysta "In-App & Desktop Notifications" app before 1.6.14_J8 for Jira. It is possible to obtain a list of all Jira projects without authentication/authorization via the plugins/servlet/nfj/ProjectFilter?searchQuery= URI.

• CWE-200

• http://packetstormsecurity.com/files/154992/Infosysta-Jira-1.6.13_J8-Project-List-Authentication-Bypass.htmlExploit, Third Party Advisory, VDB Entry
• https://marketplace.atlassian.com/apps/1217434/in-app-desktop-notifications-for-jiraProduct, Third Party Advisory
• http://packetstormsecurity.com/files/154992/Infosysta-Jira-1.6.13_J8-Project-List-Authentication-Bypass.htmlExploit, Third Party Advisory, VDB Entry
• https://marketplace.atlassian.com/apps/1217434/in-app-desktop-notifications-for-jiraProduct, Third Party Advisory

Published

Nov 1, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16902In the ARforms plugin 3.7.1 for WordPress, arf_delete_file i…7.5
• CVE-2019-16903Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/P…5.3
• CVE-2019-16904TeamPass 2.1.27.36 allows Stored XSS by setting a crafted pa…5.4
• CVE-2019-16905OpenSSH 7.7 through 7.9 and 8.x before 8.1, when compiled wi…7.8
• CVE-2019-16906An issue was discovered in the Infosysta "In-App & Desktop N…7.5
• CVE-2019-16907An issue was discovered in the Infosysta "In-App & Desktop N…5.3
• CVE-2019-16909An issue was discovered in the Infosysta "In-App & Desktop N…4.3
• CVE-2019-1691A vulnerability in the detection engine of Cisco Firepower T…5.8
• CVE-2019-16910Arm Mbed TLS before 2.19.0 and Arm Mbed Crypto before 2.0.0,…5.3
• CVE-2019-16913PC Protect Antivirus v4.14.31 installs by default to %PROGRA…7.8
• CVE-2019-16914An XSS issue was discovered in pfSense through 2.4.4-p3. In …6.1
• CVE-2019-16915An issue was discovered in pfSense through 2.4.4-p3. widgets…9.8