CVE-2020-14165

The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom…

published July 1, 2020

CVSS
—
EPSS
1%
Percentile
62.6
In the wild
Unconfirmed
What it is

The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom project avatars names via an Improper authorization vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01005 · 62.6th percentile
Published
2020-07-01T01:35Z
EPSS history
Timeline
  • 01 JUL 01:35Z
    The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom…
    cvelistv5