Lucene search
Security-metrics-botATLASSIAN:JRASERVER-72213HistoryMar 15, 2021 - 12:53 a.m.
The name of a filter can be used to XSS users who open an "Export HTML Report" - CVE-2021-26083
2021-03-1500:53:14
security-metrics-bot
jira.atlassian.com
17
atlassian jira server
xss
export html report
cve-2021-26083
remote attackers
html injection
javascript injection
affected versions
fixed versions
security vulnerability
EPSS
0.001
Percentile
29.2%
Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in Export HTML Report feature.
The affected versions are before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1.
Affected versions:
- version < 8.5.14
- 8.6.0 ā¤ version < 8.13.6
- 8.14.0 ā¤ version < 8.16.1
Fixed versions:
- 8.5.14
- 8.13.6
- 8.16.1
- 8.17.0
Related
cvelist
cvelist
CVE-2021-26083
2021-07-20 03:25:15
nvd
nvd
CVE-2021-26083
2021-07-20 04:15:10
cve
cve
CVE-2021-26083
2021-07-20 04:15:10
cnvd
cnvd
Atlassian JIRA Server Cross-Site Scripting Vulnerability (CNVD-2021-55940)
2021-07-22 00:00:00
prion
prion
Cross site scripting
2021-07-20 04:15:00
atlassian
atlassian