Medium severity5.4NVD Advisory· Published Nov 30, 2020· Updated Jun 17, 2026
CVE-2020-14193
CVE-2020-14193
Description
Affected versions of Automation for Jira - Server allowed remote attackers to read and render files as mustache templates in files inside the WEB-INF/classes & /jira/bin directories via a template injection vulnerability in Jira smart values using mustache partials. The affected versions are those before version 7.1.15.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:atlassian:automation_for_jira:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:atlassian:automation_for_jira:*:*:*:*:*:*:*:*range: <7.1.15
- (no CPE)range: <7.1.15
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1- jira.atlassian.com/browse/JIRAAUTOSERVER-185nvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.