CVE-2020-15943

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

An issue was discovered in the Gantt-Chart module before 5.5.4 for Jira. Due to a missing privilege check, it is possible to read and write to the module configuration of other users. This can also be used to deliver an XSS payload to other users' dashboards. To exploit this vulnerability, an attacker has to be authenticated.

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-79 CWE-862

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://packetstormsecurity.com/files/158751/Gantt-Chart-For-Jira-5.5.3-Missing-Privilege-Check.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2020/Aug/0Exploit, Mailing List, Third Party Advisory
https://marketplace.atlassian.com/apps/28997/gantt-chart-for-jira?hosting=cloud&tab=overviewProduct, Third Party Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-029.txtExploit, Third Party Advisory
http://packetstormsecurity.com/files/158751/Gantt-Chart-For-Jira-5.5.3-Missing-Privilege-Check.htmlExploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2020/Aug/0Exploit, Mailing List, Third Party Advisory
https://marketplace.atlassian.com/apps/28997/gantt-chart-for-jira?hosting=cloud&tab=overviewProduct, Third Party Advisory
https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2020-029.txtExploit, Third Party Advisory

Timeline

Published: Aug 4, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-159445.4An issue was discovered in the Gantt-Chart module before 5.5.5 for Jira. Due to missing validation of user input, it is vulnerable to a pers CVE-2020-159455.5Lua 5.4.0 (fixed in 5.4.1) has a segmentation fault in changedline in ldebug.c (e.g., when called by luaG_traceexec) because it incorrectly CVE-2020-159478.8A SQL injection vulnerability in the qm_adm/qm_export_stats_run.do endpoint of Loway QueueMetrics before 19.10.21 allows remote authenticate CVE-2020-159486.1eGain Chat 15.5.5 allows XSS via the Name (aka full_name) field.CVE-2020-159497.5Immuta v2.8.2 is affected by one instance of insecure permissions that can lead to user account takeover.CVE-2020-15959.9<p>A remote code execution vulnerability exists in Microsoft SharePoint where APIs aren't properly protected from unsafe data input. An atta CVE-2020-159508.8Immuta v2.8.2 is affected by improper session management: user sessions are not revoked upon logout.CVE-2020-159516.1Immuta v2.8.2 accepts user-supplied project names without properly sanitizing the input, allowing attackers to inject arbitrary HTML content CVE-2020-159529.0Immuta v2.8.2 is affected by stored XSS that allows a low-privileged user to escalate privileges to administrative permissions. Additionally CVE-2020-159537.4LibEtPan through 1.9.4, as used in MailCore 2 through 0.6.3 and other products, has a STARTTLS buffering issue that affects IMAP, SMTP, and CVE-2020-159546.5KDE KMail 19.12.3 (aka 5.13.3) engages in unencrypted POP3 communication during times when the UI indicates that encryption is in use.CVE-2020-159555.9In s/qmail through 4.0.07, an active MitM can inject arbitrary plaintext commands into a STARTTLS encrypted session between an SMTP client a