daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update cvss/severity for CVE-2020-29453

patch-1
sullo 2021-09-29 10:35:52 -04:00
parent d4690b5849
commit 6b5d52084d
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
cves/2020/CVE-2020-29453.yaml
View File

@ -3,13 +3,13 @@ id: CVE-2020-29453
info: info:
name: Pre-Auth Limited Arbitrary File Read in Jira Server name: Pre-Auth Limited Arbitrary File Read in Jira Server
author: dwisiswant0 author: dwisiswant0
severity: medium severity: high
description: The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check. description: The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check.
reference: https://jira.atlassian.com/browse/JRASERVER-72014 reference: https://jira.atlassian.com/browse/JRASERVER-72014
tags: cve,cve2020,atlassian,jira,lfi tags: cve,cve2020,atlassian,jira,lfi
classification: classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
cvss-score: 5.30 cvss-score: 7.5
cve-id: CVE-2020-29453 cve-id: CVE-2020-29453
cwe-id: CWE-22 cwe-id: CWE-22
@ -28,4 +28,4 @@ requests:
- type: word - type: word
words: words:
- '<groupId>com.atlassian.jira</groupId>' - '<groupId>com.atlassian.jira</groupId>'
part: body part: body