CVE-2020-14172

This issue exists to document that a security improvement in the way that Jira Server and Data Center use velocity templates has been implemented. The way in which velocity templates were used in Atlassian Jira Server and Data Center in affected versions allowed remote attackers to achieve remote...

CVE-2020-14172

CVE-2020-14172 concerns Atlassian Jira Server/Data Center vulnerability where insecure deserialization via server-side Velocity templates enabled remote code execution. The affected versions are Jira Server/Data Center before 7.13.0, 8.0.x before 8.5.0, and 8.6.x before 8.8.1. The issue is addres...