virus logo FortiClient Vulnerability

Atlassian Jira Software Server CVE-2020-29453 Path Traversal Vulnerability

description-logoDescription

The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check.

affected-products-logoAffected Applications

Jira Software Server

CVE References

CVE-2020-29453

Other References

https://jira.atlassian.com/projects/JRASERVER/issues/
ID 74307
Created Dec 20, 2022
Description
Updated		 Dec 14, 2023
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon lightgray-background-circle-icon lightgray-background-circle-icon
Coverage FortiClient
OS Windows
Vendor Atlassian
Patch manual
Application Jira Software Server