Lucene search

K
atlassianSecurity-metrics-botATLASSIAN:JRASERVER-72393
HistoryMay 06, 2021 - 8:05 a.m.

Stored XSS on Jira Issue XML Export - CVE-2021-26082

2021-05-0608:05:42
security-metrics-bot
jira.atlassian.com
21
jira
atlassian
server
cross-site scripting
xss
xml export
vulnerability
remote attackers

EPSS

0.001

Percentile

29.2%

Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in XML Export.

The affected versions are before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0.

Affected versions:

  • version < 8.5.14
  • 8.6.0 ≤ version < 8.13.6
  • 8.14.0 ≤ version < 8.17.0

Fixed versions:

  • 8.5.14
  • 8.13.6
  • 8.17.0

EPSS

0.001

Percentile

29.2%

Related for ATLASSIAN:JRASERVER-72393