CVE-2020-14165

Affected product: Atlassian Jira Server/Data Center. The vulnerability CVE-2020-14165 concerns the UniversalAvatarResource.getAvatars endpoint, where improper authorization in Jira Server/Data Center versions before 8.9.0 allows remote attackers to obtain information about custom project avatar n...

Improper authorization in Project Administration - Others - CVE-2020-14165

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to obtain information about custom project avatars via an improper authorization vulnerability in the UniversalAvatarResource.getAvatars resource. Affected versions: version 8.9.0 Fixed versions: 8.9.0...

Improper authorization in Project Administration - Others - CVE-2020-14165

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to obtain information about custom project avatars via an improper authorization vulnerability in the UniversalAvatarResource.getAvatars resource. Affected versions: version 8.9.0 Fixed versions: 8.9.0...