Description

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field and custom SLA names via an Information Disclosure vulnerability in the mobile site view. The affected versions are before version 8.13.2, and from version 8.14.0 before 8.14.1.

Remediation

References

CVE-2020-36235

Related Vulnerabilities

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-7418)

Oracle Application Server CVE-2007-3854 Vulnerability (CVE-2007-3854)

axios Server-Side Request Forgery (SSRF) Vulnerability (CVE-2024-39338)

WordPress Plugin Jetpack-WP Security, Backup, Speed, & Growth Cross-Site Scripting (3.9.1)

Atlassian Jira Incorrect Authorization Vulnerability (CVE-2018-20826)

Severity

Medium

Classification

CVE-2020-36235

Tags

Missing Update Known Vulnerabilities