CVE-2019-14994

Category: [Directory Traversal/Info Disclosure]

[NOTE] requires you to be logged in as a Service Desk Customer

Use the Open Jira Service Desk Signup module to signup for potentially vulnerable servers

If you have creds...Use the Open Jira Service Desk Login module to login to potentially vulnerable servers

Refs:

• https://samcurry.net/analysis-of-cve-2019-14994

• ttps://confluence.atlassian.com/adminjiraserver/jira-service-desk-security-advisory-2019-09-18-1047539909.html

• https://www.tenable.com/blog/cve-2019-14994-url-path-traversal-vulnerability-in-jira-service-desk-leads-to-information