CVE-2020-14193

Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache templates in files inside the WEB-INF/classes &…

published November 30, 2020

CVSS
—
EPSS
1%
Percentile
55.4
In the wild
Unconfirmed
What it is

Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache templates in files inside the WEB-INF/classes & <jira-installation>/jira/bin directories via a template injection vulnerability in Jira smart values using mustache partials. The affected versions are those before version 7.1.15.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00779 · 55.4th percentile
Published
2020-11-30T23:05Z
EPSS history
Timeline
  • 30 NOV 23:05Z
    Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache templates in files inside the WEB-INF/classes &…
    cvelistv5