PT-2021-11670
CVE-2020-29453
·
تاريخ النشر
2021-02-18
·
تاريخ التحديث
2022-03-30
الوصف من
CVSS 3.1
5.3
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions:
Jira Server and Jira Data Center versions prior to 8.5.11
Jira Server and Jira Data Center versions 8.6.0 through 8.13.3
Jira Server and Jira Data Center versions 8.14.0 through 8.14.x
Description:
The issue allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check in the CachingResourceDownloadRewriteRule class.
Recommendations:
For versions prior to 8.5.11, update to version 8.5.11 or later.
For versions 8.6.0 through 8.13.3, update to version 8.13.3 or later.
For versions 8.14.0 through 8.14.x, update to version 8.15.0 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾