CVEs-PoC/2020/CVE-2020-14181.md

CVE-2020-14181

Description

Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the /ViewUserHover.jspa endpoint. The affected versions are before version 7.13.6, from version 8.0.0 before 8.5.7, and from version 8.6.0 before 8.12.0.

POC

Reference

• http://packetstormsecurity.com/files/161730/Atlassian-JIRA-8.11.1-User-Enumeration.html

Github

• https://github.com/0day404/vulnerability-poc
• https://github.com/0ps/pocassistdb
• https://github.com/20142995/Goby
• https://github.com/ARPSyndicate/cvemon
• https://github.com/ARPSyndicate/kenzer-templates
• https://github.com/ArrestX/--POC
• https://github.com/Elsfa7-110/kenzer-templates
• https://github.com/Faizee-Asad/JIRA-Vulnerabilities
• https://github.com/H4ckTh3W0r1d/Goby_POC
• https://github.com/HimmelAward/Goby_POC
• https://github.com/KayCHENvip/vulnerability-poc
• https://github.com/Miraitowa70/POC-Notes
• https://github.com/Rival420/CVE-2020-14181
• https://github.com/SexyBeast233/SecBooks
• https://github.com/StarCrossPortal/scalpel
• https://github.com/Threekiii/Awesome-POC
• https://github.com/UGF0aWVudF9aZXJv/Atlassian-Jira-pentesting
• https://github.com/Z0fhack/Goby_POC
• https://github.com/amcai/myscan
• https://github.com/anonymous364872/Rapier_Tool
• https://github.com/apif-review/APIF_tool_2024
• https://github.com/bk-rao/CVE-2020-14181
• https://github.com/d4n-sec/d4n-sec.github.io
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/hackerhackrat/R-poc
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/imhunterand/JiraCVE
• https://github.com/jweny/pocassistdb
• https://github.com/merlinepedra/nuclei-templates
• https://github.com/merlinepedra25/nuclei-templates
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/peiqiF4ck/WebFrameworkTools-5.1-main
• https://github.com/pen4uin/awesome-vulnerability-research
• https://github.com/pen4uin/vulnerability-research
• https://github.com/pen4uin/vulnerability-research-list
• https://github.com/r0eXpeR/supplier
• https://github.com/rezasarvani/JiraVulChecker
• https://github.com/sobinge/nuclei-templates
• https://github.com/soosmile/POC
• https://github.com/sushantdhopat/JIRA_testing
• https://github.com/und3sc0n0c1d0/UserEnumJira
• https://github.com/xinyisleep/pocscan
• https://github.com/youcans896768/APIV_Tool