Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-71205
HistoryJun 19, 2020 - 4:05 a.m.

XSS in Navigation - Search - CVE-2020-14169

2020-06-1904:05:17
security-metrics-bot
jira.atlassian.com
25

0.001 Low

EPSS

Percentile

45.1%

The quick search component in Atlassian Jira Server and Data Center allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability.

Affected versions:

  • version < 8.9.1

Fixed versions:

  • 8.9.1
  • 8.10.0

0.001 Low

EPSS

Percentile

45.1%

Related for ATLASSIAN:JRASERVER-71205