Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-14193

Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache templates in files inside the WEB-INF/classes & <jira-installation>/

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
atlassian

Description

Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache templates in files inside the WEB-INF/classes & <jira-installation>/jira/bin directories via a template injection vulnerability in Jira smart values using mustache partials. The affected versions are those before version 7.1.15.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Atlassian Automation for Jira

  • unspecified to < 7.1.15affected

References