What’s Vulnerable › Vulnerabilities

CVE-2018-16281

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-09-21 · updated 2026-06-17

Description

The DEISER "Profields - Project Custom Fields" app before 6.0.2 for Jira has Incorrect Access Control.

Affected products

Deiser Profields-Project Custom Fields: before 6.0.2 — fixed in 6.0.2

How to fix

Upgrade to a fixed version: Deiser Profields-Project Custom Fields 6.0.2. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2018-16281 or the next vulnerability affects your stack