.. / CVE-2020-14181

• Info Disclosure
• Nuclei
• Web

Exploit for Jira Server and Data Center - Information Disclosure (CVE-2020-14181)

Description:

Jira Server and Data Center is susceptible to information disclosure. An attacker can enumerate users via the /ViewUserHover.jspa endpoint and thus potentially access sensitive information, modify data, and/or execute unauthorized operations. Affected versions are before version 7.13.6, from version 8.0.0 before 8.5.7, and from version 8.6.0 before 8.12.0.

Nuclei Template

View the template here CVE-2020-14181.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-14181.yaml

References: