Lucene search
AtlassianCVELIST:CVE-2020-14189HistoryOct 28, 2020 - 12:00 a.m.
CVE-2020-14189
2020-10-2800:00:00
atlassian
www.cve.org
0.005 Low
EPSS
Percentile
77.4%
The execute function in in the Atlassian gajira-comment GitHub Action before version 2.0.2 allows remote attackers to execute arbitrary code in the context of a GitHub runner by creating a specially crafted GitHub issue comment.
CNA Affected
[
{
"product": "gajira-comment",
"vendor": "Atlassian",
"versions": [
{
"lessThan": "2.0.2",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2020-14189
2020-11-09 22:15:12
osv
osv
CVE-2020-14189
2020-11-09 22:15:12
nvd
nvd
CVE-2020-14189
2020-11-09 22:15:12
prion
prion
Code injection
2020-11-09 22:15:00