Path traversal in Jira Service Management Server - CVE-2019-14994

Vulnerability details

The vulnerability allows a remote attacker to perform directory traversal attacks.

The vulnerability exists in the Customer Context Filter Jira Service Desk Server and Jira Service Desk Data Center due to input validation error when processing directory traversal sequences. A remote attacker with portal access can send a specially crafted HTTP request and gain view of all issues from all projects in the affected instance, such as Jira Service Desk projects, Jira Core projects, and Jira Software projects.

Note: When the "Anyone can email the service desk or raise a request in the portal setting" is enabled, an attacker can grant themselves portal access, allowing them to exploit the vulnerability.

Affected software

How to mitigate CVE-2019-14994

Links to Public Exploits and PoC-codes

• Exploit #2261 - exploits (Repo that will contain variety of exploits for either public CVE or internal research.) (April 5, 2020)

External References

• https://jira.atlassian.com/browse/JSDSERVER-6517

Related Security Bulletins

• Path traversal in Atlassian Jira Service Desk