Unrated severityNVD Advisory· Published Apr 9, 2021· Updated Sep 16, 2024

CVE-2020-36287

Description

The dashboard gadgets preference resource of the Atlassian gadgets plugin used in Jira Server and Jira Data Center before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to obtain gadget related settings via a missing permissions check.

Affected products

Atlassian/Jira Core Data Centercpe-rescue
Range: unspecified
Atlassian/Jira Servercpe-rescue
Range: unspecified

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

jira.atlassian.com/browse/JRASERVER-72258mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.050
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000