CVE-2022-36801

2022-08-1002:20:09

atlassian

www.cve.org

atlassian

jira

server

data center

rxss

vulnerability

teammanagement.jspa

html

javascript

version 8.20.8

EPSS

0.001

Percentile

42.6%

JSON

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting (RXSS) vulnerability in the TeamManagement.jspa endpoint. The affected versions are before version 8.20.8.

CNA Affected

[
  {
    "product": "Jira Server",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "8.20.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Jira Data Center",
    "vendor": "Atlassian",
    "versions": [
      {
        "lessThan": "8.20.8",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

jira.atlassian.com/browse/JRASERVER-73740

EPSS

0.001

Percentile

42.6%

JSON

Related for CVELIST:CVE-2022-36801