Lucene search
AtlassianCVELIST:CVE-2021-26082HistoryJul 20, 2021 - 3:25 a.m.
CVE-2021-26082
2021-07-2003:25:14
atlassian
www.cve.org
6
atlassian
jira
xml export
vulnerability
cross site scripting
The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a stored cross site scripting vulnerability.
CNA Affected
[
{
"product": "Jira Server",
"vendor": "Atlassian",
"versions": [
{
"lessThan": "8.5.14",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "8.6.0",
"versionType": "custom"
},
{
"lessThan": "8.13.6",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "8.14.0",
"versionType": "custom"
},
{
"lessThan": "8.17.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
},
{
"product": "Jira Data Center",
"vendor": "Atlassian",
"versions": [
{
"lessThan": "8.5.14",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "8.6.0",
"versionType": "custom"
},
{
"lessThan": "8.13.6",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
},
{
"lessThan": "unspecified",
"status": "affected",
"version": "8.14.0",
"versionType": "custom"
},
{
"lessThan": "8.17.0",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
atlassian
atlassian
Stored XSS on Jira Issue XML Export - CVE-2021-26082
2021-05-06 08:05:42
Stored XSS on Jira Issue XML Export - CVE-2021-26082
2021-05-06 08:05:42
nvd
nvd
CVE-2021-26082
2021-07-20 04:15:10
cnvd
cnvd
Atlassian JIRA Server Cross-Site Scripting Vulnerability (CNVD-2021-55939)
2021-07-22 00:00:00
prion
prion
Cross site scripting
2021-07-20 04:15:00
cve
cve
CVE-2021-26082
2021-07-20 04:15:10