Skip to content
OpenAdvisories
Unscored CVE-2020-36231 EUVD-2020-23776GHSA-972w-3xcp-6vcv

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have acces…

Published Feb 1, 2021 · Updated Sep 16, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Jira Data Center Product: Jira Server Category: Web / CMS

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view the metadata of boards they should not have access to via an Insecure Direct Object References (IDOR) vulnerability. The affected versions are before version 8.5.10, and from version 8.6.0 before 8.13.2.

Affected products

VendorProductAffectedFixed
Atlassian Jira Server unspecified – < 8.5.10, 8.6.0 – < unspecified, unspecified – < 8.13.2 8.5.10
Atlassian Jira Data Center unspecified – < 8.5.10, 8.6.0 – < unspecified, unspecified – < 8.13.2 8.5.10

References