CVE-2020-14181

This script exploits CVE-2020-14181, a user enumeration vulnerability in Atlassian JIRA. It checks if a server is vulnerable by testing a random username and then enumerates valid usernames from a provided file by analyzing the response from the ViewUserHover.jspa endpoint.

This PoC exploits CVE-2020-14181, an information disclosure vulnerability in Atlassian Jira Server and Data Center, allowing unauthenticated user enumeration via the /ViewUserHover.jspa endpoint. The script iterates through a wordlist of usernames and checks for valid users by parsing the response.

This PoC exploits CVE-2020-14181, an information disclosure vulnerability in Atlassian Jira Server and Data Center. It enumerates valid usernames by sending requests to the /ViewUserHover.jspa endpoint and parsing the response for user details.

The repository contains a working PoC for CVE-2020-14181, an information disclosure vulnerability in Jira. The script enumerates valid usernames by checking responses from the ViewUserHover.jspa endpoint.

This Metasploit module enumerates Jira users by exploiting an information disclosure vulnerability in the /ViewUserHover.jspa endpoint. It checks for user existence by analyzing HTTP responses and logs valid users.