CVE-2020-29453 Path traversal in Jira Data Center

What is CVE-2020-29453?

CVE-2020-29453 is a medium-severity path traversal vulnerability in Atlassian Jira Data Center, published on 18 Feb 2021. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0 allowed unauthenticated remote attackers to read arbitrary files within WEB-INF and META-INF directories via an incorrect path access check.

Weakness: CWE-22

Which versions are affected by CVE-2020-29453?

It affects 3 products.

Products include Atlassian Data Center, Atlassian Jira Data Center, Atlassian Jira Server.

How do I fix CVE-2020-29453?

No fix has been published for CVE-2020-29453 yet. Limit exposure of the affected software until one is available.

Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.

Is CVE-2020-29453 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2020-29453 exists.

Public exploit code: 1 Nuclei template.

Other vulnerabilities in Atlassian Jira Data Center

• CVE-2017-18113 Code injection in Jira Data Center High 8.8
• CVE-2021-41312 Auth bypass in Jira Data Center High 7.5
• CVE-2021-39123 Denial of service in Jira Data Center High 7.5
• CVE-2021-39113 Missing authorization in Jira Data Center High 7.5
• CVE-2021-43947 Code injection in Jira Data Center High 7.2

All Atlassian Jira Data Center vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-jg96-3p93-wmvr.