Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-70885
HistoryApr 08, 2020 - 3:24 a.m.

XSS via Issue Navigator Basic Search - CVE-2019-20414

2020-04-0803:24:21
security-metrics-bot
jira.atlassian.com
23

0.001 Low

EPSS

Percentile

29.3%

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in Issue Navigator Basic Search.

Affected versions:

  • version < 7.13.9
  • 8.0.0 ≤ version < 8.4.2

Fixed versions:

  • 7.13.9
  • 8.4.2
  • 8.5.0

0.001 Low

EPSS

Percentile

29.3%

Related for ATLASSIAN:JRASERVER-70885