Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JSDSERVER-6917
HistoryJul 01, 2020 - 6:16 p.m.

Information disclosure in API and Integrations - CVE-2020-14180

2020-07-0118:16:21
security-metrics-bot
jira.atlassian.com
15

0.001 Low

EPSS

Percentile

35.5%

Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-administrator user to view Project Request-Types and Descriptions, via an Information Disclosure vulnerability in the editform request-type-fields resource.

Affected versions:

  • version < 4.12.0

Fixed versions:

  • 4.12.0

0.001 Low

EPSS

Percentile

35.5%

Related for ATLASSIAN:JSDSERVER-6917