CVE-2020-29451

4.3 mediumEPSS 0.9%

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate Jira projects via an Information Disclosure vulnerability in the Jira Projects plugin report page. The affected versions are before version 8.5.11, from version 8.6.0 before 8.13.3, and from version 8.14.0 before 8.14.1.

Severity

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 59% of CVEs (scores of 2026-10-31)
Published: 2021-02-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

atlassian:data_center
atlassian:jira
atlassian:jira_server

References

https://jira.atlassian.com/browse/JRASERVER-72000
https://jira.atlassian.com/browse/JRASERVER-72000

Check your stack JSON