Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-71498
HistoryAug 31, 2020 - 9:25 p.m.

Project enumeration through /browse.PROJECTKEY - CVE-2020-14178

2020-08-3121:25:15
security-metrics-bot
jira.atlassian.com
54

0.018 Low

EPSS

Percentile

88.1%

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Information Disclosure vulnerability in the /browse.PROJECTKEY endpoint.

Affected versions:

  • version < 7.13.17
  • 7.14.0 ≤ version < 8.5.8
  • 8.6.0 ≤ version < 8.12.0

Fixed versions:

  • 7.13.17
  • 8.5.8
  • 8.12.0
  • 8.13.0

0.018 Low

EPSS

Percentile

88.1%

Related for ATLASSIAN:JRASERVER-71498