CVE-2020-14180
CVE-2020-14180
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.8%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
21 Sep 2020Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-administrator user to view Project Request-Types and Descriptions, via an Information Disclosure vulnerability in the editform request-type-fields resource. The affected versions are before version 4.12.0.
Affected products
Atlassian · Jira Service Desk ServerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →