Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2020-15943

EPSS 1.67% · P82
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2020-15943

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
An issue was discovered in the Gantt-Chart module before 5.5.4 for Jira. Due to a missing privilege check, it is possible to read and write to the module configuration of other users. This can also be used to deliver an XSS payload to other users' dashboards. To exploit this vulnerability, an attacker has to be authenticated.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Atlassian Jira Gantt-Chart 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Atlassian Jira是澳大利亚Atlassian公司的一套缺陷跟踪管理系统。该系统主要用于对工作中各类问题、缺陷进行跟踪管理。Gantt-Chart是其中的一个项目管理模块。 Atlassian Jira Gantt-Chart 5.5.4之前版本中存在安全漏洞，该漏洞源于程序缺少权限检查。攻击者可利用该漏洞对其他用户的模块配置进行读写操作。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2020-15943

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2020-15943

请登录查看更多情报信息。

Same Patch Batch · n/a · 2020-08-04 · 14 CVEs total

CVE-2020-16847Extreme Networks Management Center Extreme Analytics 跨站脚本漏洞
CVE-2020-16843Firecracker 安全漏洞
CVE-2020-13522SoftPerfect RAM Disk 输入验证错误漏洞
CVE-2020-15956ACTi NVR3 Standard Server 缓冲区错误漏洞
CVE-2020-15944Atlassian Jira Gantt-Chart 跨站脚本漏洞
CVE-2020-13523SoftPerfect RAM Disk spvve.sys驱动程序信息泄露漏洞
CVE-2020-16199Delta Electronics CNCSoft ScreenEditor 缓冲区错误漏洞
CVE-2020-16201Delta Electronics CNCSoft ScreenEditor 缓冲区错误漏洞
CVE-2020-16203Delta Electronics CNCSoft ScreenEditor 缓冲区错误漏洞
CVE-2020-16134Swisscom Internet Box 安全漏洞
CVE-2020-6012Check Point Software Technologies ZoneAlarm Anti-Ransomware 后置链接漏洞
CVE-2020-15467Cohesive Networks vns3:vpn 操作系统命令注入漏洞
CVE-2019-20001RICOH Streamline NX Client Tool和RICOH Streamline NX PC Client 安全漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2020-15943

No comments yet

Leave a comment