CVE-2020-29453
MEDIUM 5.3EPSS 20.3%
The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check.
- Affected
- Atlassian · Jira Server · Jira Data Center
- CVSS v3.1 NVD
- 5.3 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS v2.0 NVD
- 5.0 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N - EPSS
- 20.27% chance of exploitation in the next 30 days, 97th percentile
- Nuclei
- medium · CWE-22
- Published
- 2021-02-18
- Updated
- 2024-09-17