Lucene search
DblackATLASSIAN:JIRAAUTOSERVER-185HistoryNov 26, 2020 - 5:44 a.m.
Template injection vulnerability in Automation for Jira smart values - CVE-2020-14193
2020-11-2605:44:35
dblack
jira.atlassian.com
13
0.001 Low
EPSS
Percentile
34.5%
Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache templates in files inside the WEB-INF/classes & <jira-installation>/jira/bin directories via a template injection vulnerability in Jira smart values using mustache partials.
The affected versions are those before version 7.1.15.
Affected versions:
- version < 7.1.15
Fixed versions:
- 7.1.15 & later
| CPE | Name | Operator | Version |
|---|---|---|---|
| automation for jira | lt | 7.1.15 | |
| automation for jira | le | 7.1.1 |
Related
prion
prion
Sql injection
2020-11-30 23:15:00
cve
cve
CVE-2020-14193
2020-12-01 00:00:00
cvelist
cvelist
CVE-2020-14193
2020-12-01 00:00:00
nvd
nvd
CVE-2020-14193
2020-11-30 23:15:11
atlassian
atlassian