CVE-2020-14165
CVE-2020-14165
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 1.0%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
01 Jul 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom project avatars names via an Improper authorization vulnerability.
Affected products
Atlassian · Jira Server and Data CenterWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →