CVE-2020-14188

2020-10-2800:00:00

atlassian

www.cve.org

0.005 Low

EPSS

Percentile

77.4%

JSON

The preprocessArgs function in the Atlassian gajira-create GitHub Action before version 2.0.1 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue.

CNA Affected

[
  {
    "product": "gajira-create",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "2.0.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/atlassian/gajira-create/security/advisories/GHSA-4xqx-pqpj-9fqw

0.005 Low

EPSS

Percentile

77.4%

JSON

Related for CVELIST:CVE-2020-14188