Update cvss/severity for CVE-2020-29453
parent
d4690b5849
commit
6b5d52084d
|
@ -3,13 +3,13 @@ id: CVE-2020-29453
|
|||
info:
|
||||
name: Pre-Auth Limited Arbitrary File Read in Jira Server
|
||||
author: dwisiswant0
|
||||
severity: medium
|
||||
severity: high
|
||||
description: The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check.
|
||||
reference: https://jira.atlassian.com/browse/JRASERVER-72014
|
||||
tags: cve,cve2020,atlassian,jira,lfi
|
||||
classification:
|
||||
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
||||
cvss-score: 5.30
|
||||
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
|
||||
cvss-score: 7.5
|
||||
cve-id: CVE-2020-29453
|
||||
cwe-id: CWE-22
|
||||
|
||||
|
@ -28,4 +28,4 @@ requests:
|
|||
- type: word
|
||||
words:
|
||||
- '<groupId>com.atlassian.jira</groupId>'
|
||||
part: body
|
||||
part: body
|
||||
|
|
Loading…
Reference in New Issue