Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Jira QueryComponent Information Disclosure (CVE-2020-14179) - Vulnerability Database

Jira QueryComponent Information Disclosure (CVE-2020-14179)

Description

Due to an information disclosure vulnerability, Jira's QueryComponent!Default.jspa endpoint allows unauthenticated attackers to view custom field names and custom SLA names

Remediation

Consult "Web references" for more information about solutions.

References

Sensitive data exposure via /secure/QueryComponent!Default.jspa endpoint - CVE-2020-14179

Related Vulnerabilities

Citrix ADC NetScaler Local File Inclusion (CVE-2020-8193) Medium
Common tags: Information Disclosure Known Vulnerabilities
Argo CD Information Disclosure (CVE-2024-37152) Medium
Common tags: Information Disclosure Known Vulnerabilities
Zend Framework local file disclosure via XXE injection High
Common tags: Information Disclosure Known Vulnerabilities
Citrix NetScaler Memory Disclosure 'Citrix Bleed 2' (CVE-2025-5777) Critical
Common tags: Information Disclosure Known Vulnerabilities
Apache Tomcat examples directory vulnerabilities Medium
Common tags: Information Disclosure Known Vulnerabilities

Severity

Medium

Classification

CVE-2020-14179
CWE-288
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Information Disclosure
Known Vulnerabilities