CoreCVE
Back

MEDIUM

The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determine if a group exists & members of groups if they are assigned to publicly visible issue field

Published Apr 1, 2021

Description

The membersOf JQL search function in Jira Server and Data Center before version 8.5.13, from version 8.6.0 before version 8.13.5, and from version 8.14.0 before version 8.15.1 allows remote anonymous attackers to determine if a group exists & members of groups if they are assigned to publicly visible issue field.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner atlassian
Published Apr 1, 2021
Updated Sep 16, 2024
Reserved Mar 31, 2021
Link CVE-2020-36286
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-36286
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-36286
ENISA EUVD
Assigner atlassian
Published Apr 1, 2021
Updated Sep 16, 2024
Exploited since n/a
Link EUVD-2020-23828
EUVD-2020-23828