Description

The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability.

Remediation

References

CVE-2020-4029

Related Vulnerabilities

WordPress Plugin Sticky Popup Cross-Site Scripting (1.2)

OpenSSL Other Vulnerability (CVE-2015-0207)

WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.14)

WordPress Plugin Chop Slider 3 SQL Injection (3.4)

WordPress Plugin 10Web Social Feed for Instagram Multiple Cross-Site Scripting Vulnerabilities (1.3.0)

Severity

Medium

Classification

CVE-2020-4029

Tags

Missing Update Known Vulnerabilities