EDB-49748

PoC

Atlassian Jira Service Desk 4.9.1 - Unrestricted File Upload to XSS

view exploit source exploit_dbtype webappsauthor Captain_hookpublished 2021-04-07catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-14166USmedium4.8Exploit
The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan