Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-69795
HistoryAug 12, 2019 - 2:47 a.m.

XSS in various templates of the Optimization plugin - CVE-2019-8450

2019-08-1202:47:13
security-metrics-bot
jira.atlassian.com
13

EPSS

0.001

Percentile

29.2%

Various templates of the Optimization plugin in Jira before version 7.13.6, and from version 8.0.0 before version 8.4.0 allow remote attackers who have permission to manage custom fields to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a custom field.

EPSS

0.001

Percentile

29.2%

Related for ATLASSIAN:JRASERVER-69795