CVE-2020-29453

The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0…

published February 18, 2021

CVSS

—

EPSS

20%

Percentile

97.5

In the wild

Unconfirmed

What it is

The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.20268 · 97.5th percentile
Published: 2021-02-18T15:09Z

EPSS history

Timeline

18 FEB 15:09Z
The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0…
cvelistv5