Description

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure vulnerability in the /rest/api/2/customFieldOption/ endpoint. The affected versions are before version 8.15.0.

Remediation

References

CVE-2020-36237

Related Vulnerabilities

WordPress Plugin WP ALL Export Pro Multiple Vulnerabilities (1.7.8)

Oracle Database Server Deserialization of Untrusted Data Vulnerability (CVE-2017-15095)

Oracle Database Server CVE-2011-2232 Vulnerability (CVE-2011-2232)

Joomla! Core 3.x.x SQL Injection (3.0.0 - 3.4.6)

WordPress Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4257)

Severity

Medium

Classification

CVE-2020-36237

Tags

Missing Update Known Vulnerabilities