The Cprime Power Scripts app before 4.0.14 for Atlassian Jira allows Directory Traversal.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-9005
Reference (s):
- https://marketplace.atlassian.com/apps/43318/power-scripts-jira-script-automation/version-history
- https://www.detack.de/en/cve-2019-9005