VULNERABILITY INTELLIGENCE

CVE-2020-14165

CVSS score5.3 MEDIUM
EPSS probability1.00%
CISA KEVNot currently listed
Published2020-07-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

The UniversalAvatarResource.getAvatars resource in Jira Server and Data Center before version 8.9.0 allows remote attackers to obtain information about custom project avatars names via an Improper authorization vulnerability.

Weakness classification

  • nvd@nist.gov: NVD-CWE-noinfo

Primary references