References https://jira.atlassian.com/browse/JRASERVER-71536 https://nvd.nist.gov/vuln/detail/CVE-2020-14179 https://avd.aliyun.com/detail?id=AVD-2020-14179 https://www.ddpoc.com/DVB-2021-2313.html https://github.com/mrnazu/CVE-2020-14179 https://medium.com/@akashutosh659/how-i-discovered-an-information-disclosure-vulnerability-in-jira-instance-cve-2020-14179-644b14386e38 https://www.acunetix.com/vulnerabilities/web/jira-querycomponent-information-disclosure-cve-2020-14179/ https://www.sentinelone.com/vulnerability-database/cve-2020-14179/ https://community.atlassian.com/t5/Jira-questions/Sensitive-data-exposure-via-secure-QueryComponent-Default-jspa/qaq-p/1666258 https://raw.githubusercontent.com/projectdiscovery/nuclei-templates/main/http/cves/2020/CVE-2020-14179.yaml
Related VulnerabilitiesPoCCVE-2026-27826: mcp-atlassian < 0.17.0 - Server-Side Request ForgeryMCP Atlassian 存在SSRF漏洞(CVE-2026-27826)PoCconfluence-xslt-macro-ssrf: Atlassian Confluence XSLT Macro - Server-Side Request ForgeryPoCCVE-2017-5983: JIRA Workflow Designer Plugin in Atlassian JIRA Server > 6.3.0 - Remote Code Execution (XXE)Atlassian Jira Software Data Center And Server 需授权 路径遍历漏洞CVE-2019-3396: Atlassian Confluence Path TraversalAtlassian Confluence /json/setup-restore.action 文件上传漏洞(CVE-2023-22518)PoCCVE-2015-8399: Atlassian Confluence <5.8.17 - Information DisclosurePoCCVE-2017-9506: Atlassian Jira IconURIServlet - Cross-Site Scripting/Server-Side Request ForgeryPoCCVE-2018-20824: Atlassian Jira WallboardServlet <7.13.1 - Cross-Site ScriptingPoCCVE-2018-5230: Atlassian Jira Confluence - Cross-Site Scripting