CVE-2020-14179 PoC — Atlassian Jira 信息泄露漏洞

Source

https://github.com/c0brabaghdad1/CVE-2020-14179

Associated Vulnerability

Title:Atlassian Jira 信息泄露漏洞 (CVE-2020-14179)
Description:Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA names via an Information Disclosure vulnerability in the /secure/QueryComponent!Default.jspa endpoint. The affected versions are before version 8.5.8, and from version 8.6.0 before 8.11.1.

Description

CVE-2020-14179 Scanner

Readme

# CVE-2020-14179 Scanner

Sample scan (./CVE-2020-14179.pl -u jira.atlassian.com ) OR (./CVE-2020-14179.pl -u https://jira.atlassian.com )
![Sample](https://github.com/c0brabaghdad1/CVE-2020-14179/blob/master/images/url.png)

List scan (./CVE-2020-14179.pl -l list.txt)
![list](https://github.com/c0brabaghdad1/CVE-2020-14179/blob/master/images/list.png)

Show Options (./CVE-2020-14179.pl)
![Options](https://github.com/c0brabaghdad1/CVE-2020-14179/blob/master/images/options.png)

# How to install and use (* linux)
* git clone https://github.com/c0brabaghdad1/CVE-2020-14179.git
* cd CVE-2020-14179
* chmod +x CVE-2020-14179.pl 
* (./CVE-2020-14179.pl -u https://target.tld) OR (./CVE-2020-14179.pl -u target.tld)
* ./CVE-2020-14179.pl -l list.txt

File Snapshot


 [4.0K]  /data/pocs/6720734240a7c2bcd95ece31fb34d3a3e791af15
├── [2.1K]  CVE-2020-14179.pl
├── [4.0K]  images
│   ├── [ 42K]  list1.png
│   ├── [ 38K]  options.png
│   └── [ 25K]  url.png
└── [ 752]  README.md

1 directory, 5 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!