Lucene search

CVE-2020-14169

🗓️ 01 Jul 2020 02:12:15Reported by atlassianType

The quick search component in Atlassian Jira Server and Data Center before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerabilit

Reporter	Title	Published	Views	Family All 6
Prion	Cross site scripting	1 Jul 202002:15	–	prion
NVD	CVE-2020-14169	1 Jul 202002:15	–	nvd
Atlassian	XSS in Navigation - Search - CVE-2020-14169	19 Jun 202004:05	–	atlassian
Atlassian	XSS in Navigation - Search - CVE-2020-14169	19 Jun 202004:05	–	atlassian
Cvelist	CVE-2020-14169	1 Jul 202001:35	–	cvelist
Tenable Nessus	Atlassian Jira 8.0 < 8.9.1 XSS in Quick Search (JRASERVER-71205)	21 Sep 202000:00	–	nessus

Nvd

Node

atlassian jiraRange<8.9.1

atlassian jira_software_data_centerRange<8.9.1

[
  {
    "product": "Jira Server and Data Center",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "8.9.1",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
jira	www.jira.atlassian.com/browse/JRASERVER-71205

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

01 Jul 2020 02:15Current

5.9Medium risk

Vulners AI Score5.9

CVSS24.3

CVSS36.1

EPSS0.00334

CWE-79