Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-70858
HistoryApr 02, 2020 - 4:28 a.m.

Stored XSS in Add Field module - CVE-2019-20900

2020-04-0204:28:46
security-metrics-bot
jira.atlassian.com
88

EPSS

0.001

Percentile

29.2%

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the Add Field module.

Affected versions:

  • version < 8.7.0

Fixed versions:

  • 8.7.0

EPSS

0.001

Percentile

29.2%

Related for ATLASSIAN:JRASERVER-70858