CVE-2020-14179 PoC — Atlassian Jira 信息泄露漏洞

Source

https://github.com/c0brabaghdad1/CVE-2020-14179

Associated Vulnerability

Title:Atlassian Jira 信息泄露漏洞 (CVE-2020-14179)
Description:Affected versions of Atlassian Jira Server and Data Center allow remote, unauthenticated attackers to view custom field names and custom SLA names via an Information Disclosure vulnerability in the /secure/QueryComponent!Default.jspa endpoint. The affected versions are before version 8.5.8, and from version 8.6.0 before 8.11.1.

Description

CVE-2020-14179 Scanner

Readme

# CVE-2020-14179 Scanner

Sample scan (./CVE-2020-14179.pl -u jira.atlassian.com ) OR (./CVE-2020-14179.pl -u https://jira.atlassian.com )
![Sample](https://github.com/c0brabaghdad1/CVE-2020-14179/blob/master/images/url.png)

List scan (./CVE-2020-14179.pl -l list.txt)
![list](https://github.com/c0brabaghdad1/CVE-2020-14179/blob/master/images/list.png)

Show Options (./CVE-2020-14179.pl)
![Options](https://github.com/c0brabaghdad1/CVE-2020-14179/blob/master/images/options.png)

# How to install and use (* linux)
* git clone https://github.com/c0brabaghdad1/CVE-2020-14179.git
* cd CVE-2020-14179
* chmod +x CVE-2020-14179.pl 
* (./CVE-2020-14179.pl -u https://target.tld) OR (./CVE-2020-14179.pl -u target.tld)
* ./CVE-2020-14179.pl -l list.txt

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!