CVEvulnerability

CVE-2020-29451

4.3 MEDIUM Published 2021-02-15 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-02-15
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 2.0 ([email protected])
4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects via an Information Disclosure vulnerability in the Jira Projects plugin report page. The affected versions are before version 8.5.11, from version 8.6.0 before 8.13.3, and from version 8.14.0 before 8.14.1.

Affected configurations

• atlassian data center (< 8.5.11) • atlassian data center (>= 8.6.0 < 8.13.3) • atlassian data center (>= 8.14.0 < 8.14.1) • atlassian jira (< 8.5.11) • atlassian jira server (>= 8.6.0 < 8.13.3) • atlassian jira server (>= 8.14.0 < 8.14.1)

References