Lucene search
Security-metrics-botATLASSIAN:JRASERVER-72432HistoryMay 18, 2021 - 5:47 p.m.
XSS in Issue Type /editworkflowscheme.jspa - CVE 2021-26080
2021-05-1817:47:26
security-metrics-bot
jira.atlassian.com
33
jira server
jira data center
xss vulnerability
editworkflowscheme.jspa
cve 2021-26080
remote attackers
arbitrary html
arbitrary javascript
affected versions
fixed versions
matteo sebasta
EPSS
0.001
Percentile
44.9%
Affected versions of Jira Server and Jira Data Center have a XSS vulnerability in the EditWorkflowScheme.jspa component which allows remote attackers to inject arbitrary HTML or JavaScript:
Affected versions:
- version < 8.5.14
- 8.6.0 ≤ version < 8.13.6
- 8.14.0 ≤ version < 8.16.1
Fixed versions:
- 8.5.14
- 8.13.6
- 8.16.1
This vulnerability is attributed to Matteo Sebasta.
Related
cvelist
cvelist
CVE-2021-26080
2021-06-07 22:25:11
prion
prion
Cross site scripting
2021-06-07 23:15:00
nvd
nvd
CVE-2021-26080
2021-06-07 23:15:08
atlassian
atlassian
XSS in Issue Type /editworkflowscheme.jspa - CVE 2021-26080
2021-05-18 17:47:26
cve
cve
CVE-2021-26080
2021-06-07 23:15:08