CVE-2020-36237

5.3 mediumEPSS 1.2%

Medium (5.3) in atlassian. EPSS 1.2% chance of exploitation in the next 30 days.

Affected versions of Atlassian Jira Server and Data Center allow unauthenticated remote attackers to view custom field options via an Information Disclosure vulnerability in the /rest/api/2/customFieldOption/ endpoint. The affected versions are before version 8.15.0.

Severity

CVSS 3.1

5.3 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
Published: 2021-02-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

atlassian:data_center
atlassian:jira

References

https://jira.atlassian.com/browse/JRASERVER-72064
https://jira.atlassian.com/browse/JRASERVER-72064

Check your stack JSON