Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Information Disclosure vulnerability in the /browse.PROJECTKEY endpoint. The affected versions are before version 7.13.7, from version 8.0.0 before 8.5.8, and from version 8.6.0 before 8.12.0.

Remediation

References

CVE-2020-14178

Related Vulnerabilities

Atlassian Confluence Incorrect Behavior Order: Validate Before Canonicalize Vulnerability (CVE-2022-26137)

WordPress Plugin ThinkTwit Security Bypass (1.5.1)

WordPress Plugin Related Posts Lite Security Bypass (1.1)

WordPress 3.7.x Multiple Vulnerabilities (3.7 - 3.7.39)

WordPress Plugin WP SVG Icons Cross-Site Request Forgery (3.2.1)

Severity

High

Classification

CVE-2020-14178

Tags

Missing Update Known Vulnerabilities