CVE-2020-14193

Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache templates in files inside the WEB-INF/classes & /jira/bin directories via a template injection vulnerability in Jira smart values using mustache partials. The affected versions are thos...

Sql injection

Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache templates in files inside the WEB-INF/classes & /jira/bin directories via a template injection vulnerability in Jira smart values using mustache partials. The affected versions are thos...

PT-2020-13922

Name of the Vulnerable Software and Affected Versions Automation for Jira - Server versions prior to 7.1.15 Description The issue allows remote attackers to read and render files as mustache templates in files inside the WEB-INF/classes and jira-installation/jira/bin directories via a template...

CVE-2020-14193: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache templates in files inside the WEB-INF/classes & /jira/bin directories via a template injection vulnerability in Jira smart values using mustache partials. The affected versions are thos...