CVE-2020-14181

Related Files

Jira Users Enumeration

Posted Sep 1, 2024

Authored by Mikhail Klyuchnikov, Brian Halbach | Site metasploit.com

This Metasploit module exploits an information disclosure vulnerability that allows an unauthenticated user to enumerate users in the /ViewUserHover.jspa endpoint. This only affects Jira versions < 7.13.16, 8.0.0 ≤ version < 8.5.7, 8.6.0 ≤ version < 8.11.1 Discovered by Mikhail Klyuchnikov @__mn1__ This Metasploit module has been tested on versions 8.4.1, 8.5.6, 8.10.1, 8.11.0.

tags | exploit, info disclosure

advisories | CVE-2020-14181

SHA-256 | 9986ec180d087e713848f6f47f32573f8332f188e2e0668566a302808f278b36

Download | Favorite | View

Atlassian JIRA 8.11.1 User Enumeration

Posted Mar 10, 2021

Authored by Dolev Farhi

Atlassian JIRA version 8.11.1 suffers from a user enumeration vulnerability.

tags | exploit

advisories | CVE-2020-14181

SHA-256 | 6584245530e79f39f2415efeba748683f667c83104fcd83cfe44d6c6ab433980

Download | Favorite | View