.. / CVE-2020-36289

• Info Disclosure
• Nuclei
• Web

Exploit for Jira Server and Data Center - Information Disclosure (CVE-2020-36289)

Description:

Jira Server and Data Center is susceptible to information disclosure. An attacker can enumerate users via the QueryComponentRendererValue!Default.jspa endpoint and thus potentially access sensitive information, modify data, and/or execute unauthorized operations, Affected versions are before version 8.5.13, from version 8.6.0 before 8.13.5, and from version 8.14.0 before 8.15.1.

Nuclei Template

View the template here CVE-2020-36289.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-36289.yaml

References: