.. / CVE-2020-14179

• Info Disclosure
• Nuclei
• Web

Exploit for Atlassian Jira Server/Data Center <8.5.8/8.6.0 - 8.11.1 - Information Disclosure (CVE-2020-14179)

Description:

Atlassian Jira Server and Data Center before 8.5.8 and 8.6.0 through 8.11.1 are susceptible to information disclosure via the /secure/QueryComponent!Default.jspa endpoint. An attacker can view custom field names and custom SLA names.

Nuclei Template

View the template here CVE-2020-14179.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-14179.yaml

References: