CVE-2020-14179 | BDVDB-2026-142004 Detail

AtlassianJira Server

Description#

Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA names via an Information Disclosure vulnerability in the /secure/QueryComponent!Default.jspa endpoint. The affected versions are before version 8.5.8, and from version 8.6.0 before 8.11.1.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://jira.atlassian.com/browse/JRASERVER-71536

Exploit#

No public exploit known

History#

Version 12020-09-21Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.