Security Advisory

CVE-2020-14180

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-21 00:55:12
Last updated 2024-09-17 01:26:00
Assigner atlassian
State PUBLISHED

Description

Affected versions of Atlassian Jira Service Desk Server and Data Center allow remote attackers authenticated as a non-administrator user to view Project Request-Types and Descriptions, via an Information Disclosure vulnerability in the editform request-type-fields resource. The affected versions are before version 4.12.0.