XSS in XML export view - CVE-2020-4021

2020-04-1923:32:40

security-metrics-bot

jira.atlassian.com

0.001 Low

EPSS

Percentile

29.3%

JSON

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the XML export view.

Affected versions:

version < 7.13.16
8.0.0 ≤ version < 8.5.5
8.6.0 ≤ version < 8.8.1

Fixed versions:

7.13.16
8.5.5
8.8.1
8.9.0

CPENameOperatorVersion
jira server and data centerle6.0.8
jira server and data centerle8.0.0
jira server and data centerlt7.13.16
jira server and data centerle8.8.0
jira server and data centerlt8.5.5
jira server and data centerlt8.9.0
jira server and data centerle8.5.4
jira server and data centerle7.0.0
jira server and data centerle7.13.13
jira server and data centerlt8.8.1

Name	Operator	Version
jira server and data center	le	6.0.8
jira server and data center	le	8.0.0
jira server and data center	lt	7.13.16
jira server and data center	le	8.8.0
jira server and data center	lt	8.5.5
jira server and data center	lt	8.9.0
jira server and data center	le	8.5.4
jira server and data center	le	7.0.0
jira server and data center	le	7.13.13
jira server and data center	lt	8.8.1

0.001 Low

EPSS

Percentile

29.3%

JSON

Related for ATLASSIAN:JRASERVER-70923