CVE-2020-14165

Published: 2020-07-01T02:15Z

Last Modified: 2024-11-21T05:02Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom project avatars names via an Improper authorization vulnerability. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt