CVEs-PoC/2020/CVE-2020-14178.md

CVE-2020-14178

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate project keys via an Information Disclosure vulnerability in the /browse.PROJECTKEY endpoint. The affected versions are before version 7.13.7, from version 8.0.0 before 8.5.8, and from version 8.6.0 before 8.12.0.

POC

Reference

No PoCs from references.

Github

• https://github.com/404notf0und/CVE-Flow
• https://github.com/ARPSyndicate/cvemon
• https://github.com/Faizee-Asad/JIRA-Vulnerabilities
• https://github.com/UGF0aWVudF9aZXJv/Atlassian-Jira-pentesting
• https://github.com/imhunterand/JiraCVE
• https://github.com/rezasarvani/JiraVulChecker