CVE-2020-29453

CVE-2020-29453: falha em Atlassian Jira Server

Publicada em · Atualizada em

23Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 24%
probabilidade de exploração
24%top 2% das CVEs
exploração observada
nãonenhuma fonte reporta
The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check.
Produtos afetados
Atlassian · Jira Data CenterAtlassian · Jira Server
CVEs relacionadas — Atlassian Jira Server

No mesmo produto, das mais perigosas para as menos.

CVE-2021-26086MEDIUMCVE-2021-26086EPSS 100.0%KEVCVE-2020-14181—CVE-2020-14181EPSS 99.6%CVE-2020-36289MEDIUMCVE-2020-36289EPSS 99.2%CVE-2020-14179—CVE-2020-14179EPSS 76.0%CVE-2022-36801MEDIUMCVE-2022-36801EPSS 66.3%CVE-2021-43942—CVE-2021-43942EPSS 55.4%
Referências
https://jira.atlassian.com/browse/JRASERVER-72014