Description

The /rest/project-templates/1.0/createshared resource in Atlassian Jira Server and Data Center before version 8.5.5, from 8.6.0 before 8.7.2, and from 8.8.0 before 8.8.1 allows remote attackers to enumerate project names via an improper authorization vulnerability.

Remediation

References

CVE-2020-4029

Related Vulnerabilities

ProjectSend Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-9786)

Oracle JRE CVE-2020-2803 Vulnerability (CVE-2020-2803)

WordPress Plugin Profile Builder Pro SQL Injection (3.3.2)

Ruby Other Vulnerability (CVE-2016-2337)

MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-3313)

Severity

Medium

Classification

CVE-2020-4029

Tags

Missing Update Known Vulnerabilities