Boletines de Vulnerabilidades

CVE-2020-14180

   
Software afectado ATLASSIAN
 
Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-administrator user to view Project Request-Types and Descriptions, via an Information Disclosure vulnerability in the editform request-type-fields resource. The affected versions are before version 4.12.0.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2020-14180