Lucene search
Security-metrics-botATLASSIAN:JRASERVER-71184HistoryJun 16, 2020 - 2:46 a.m.
XSS in WYSIWYG editor via pasted code - CVE-2020-14164
2020-06-1602:46:07
security-metrics-bot
jira.atlassian.com
34
0.001 Low
EPSS
Percentile
45.1%
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the WYSIWYG editor.
The affected versions are before 8.5.9, and from version 8.6.0 before 8.8.2.
Affected versions:
- version < 8.5.9
- 8.6.0 ā¤ version < 8.8.2
Fixed versions:
- 8.5.9
- 8.8.2
- 8.9.0
Related
prion
prion
Cross site scripting
2020-07-01 02:15:00
cvelist
cvelist
CVE-2020-14164
2020-07-01 00:00:00
nvd
nvd
CVE-2020-14164
2020-07-01 02:15:11
cve
cve
CVE-2020-14164
2020-07-01 02:15:11
atlassian
atlassian
XSS in WYSIWYG editor via pasted code - CVE-2020-14164
2020-06-16 02:46:07