Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects via an Information Disclosure vulnerability in the Jira Projects plugin report page. The affected versions are before version 8.5.11, from version 8.6.0 before 8.13.3, and from version 8.14.0 before 8.14.1.

Remediation

References

CVE-2020-29451

Related Vulnerabilities

WordPress Plugin WordPress Popups for Marketing and Email Newsletters, Lead Generation and Conversions by OptinMonster Security Bypass (2.6.4)

WordPress Plugin PostmagThemes Demo Import Arbitrary File Upload (1.0.7)

Moodle Resource Management Errors Vulnerability (CVE-2015-2268)

WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.4)

WordPress Plugin CommentLuv Cross-Site Scripting (2.92.3)

Severity

Medium

Classification

CVE-2020-29451

Tags

Missing Update Known Vulnerabilities