Lucene search
Security-metrics-botATLASSIAN:JRASERVER-72064HistoryFeb 04, 2021 - 1:15 a.m.
Custom field options are exposed via an unauthenticated REST API endpoint - CVE-2020-36237
2021-02-0401:15:18
security-metrics-bot
jira.atlassian.com
61
atlassian jira server
data center
information disclosure
vulnerability
remote attackers
custom field options
rest api
unauthenticated
fixed version
EPSS
0.002
Percentile
56.4%
Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure vulnerability in the /rest/api/2/customFieldOption/ endpoint.
The affected versions are before version 8.15.0.
Affected versions:
- version < 8.15.0
Fixed versions:
- 8.15.0
Related
cve
cve
CVE-2020-36237
2021-02-15 00:15:12
prion
prion
Information disclosure
2021-02-15 00:15:00
atlassian
atlassian
cvelist
cvelist
CVE-2020-36237
2021-02-14 23:55:12
nvd
nvd
CVE-2020-36237
2021-02-15 00:15:12