und3sc0n0c1d0/UserEnumJira

PoC

Serie de scripts para enumerar nombres de usuarios de JIRA a partir de vulnerabilidades conocidas (CVE-2020-14181, CVE-2019-3403, CVE-2019-8449...)

view exploit source poc_in_githubauthor und3sc0n0c1d0published 2020-09-15catalog poc_in_github

exploited CVEs (2)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2020-14181US	medium5.3	99.6% (100th)	Exploit	2020-09-17
Affected versions of Atlassian Jira Server and Data Center allow an unauthenticated user to enumerate users via an Information Disclosure vulnerability in the /ViewUserHover.jspa e…
CVE-2019-3403US	medium5.3OT high	51.3% (99th)	Exploit	2019-05-22
The /rest/api/2/user/picker rest resource in Jira before version 7.13.3, from version 8.0.0 before version 8.0.4, and from version 8.1.0 before version 8.1.1 allows remote attacker…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.