CVE-2020-36286

The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0…

published April 1, 2021

CVSS
—
EPSS
1%
Percentile
73.4
In the wild
Unconfirmed
What it is

The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determine if a group exists & members of groups if they are assigned to publicly visible issue field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01460 · 73.4th percentile
Published
2021-04-01T03:10Z
EPSS history
Timeline
  • 01 APR 03:10Z
    The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0…
    cvelistv5