Information disclosure at '████████' --- CVE-2020-14179
该报告还没有中文解读。
原文摘录
摘自原文（2124 字符中的一小部分）
Research conducted on __████████__ indicates that the Atlassian Jira Server and Data Center instance allows remote, unauthenticated attackers to view custom field names and custom SLA names via an Information Disclosure vulnerability in the endpoint …
原文中的代码
## The domain _███_ interpreted as in-scope The domain __████████__ is interpreted as in-scope of the [DoD VDP](<https://hackerone.com/deptofdefense>), based on the following findings: 1. The acronym "████: <https://www.█████████>. 2. The link to __█████████__ is included in the navigation menu …
默认不展示报告全文。以上为简短摘录，完整复现过程请阅读原文。版权归研究员与 U.S. Dept Of Defense 所有。
时间线
- 报告提交
- 公开披露
阅读 HackerOne 原文 ↗作者 @0x3f · 版权归作者与 U.S. Dept Of Defense 所有