Cross site scripting

2020-07-0302:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

29.3%

JSON

The file upload feature in Atlassian Jira Server and Data Center in affected versions allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability. The affected versions are before version 8.5.4, from version 8.6.0 before 8.6.2, and from version 8.7.0 before 8.7.1.

CPENameOperatorVersion
jiralt8.5.4
jira_data_centerge8.6.0
jira_data_centerlt8.6.2
jira_data_centerge8.7.0
jira_data_centerlt8.7.1
jira_serverge8.7.0
jira_serverlt8.7.1
jira_serverge8.6.0
jira_serverlt8.6.2
jira_software_data_centerlt8.5.4

Name	Operator	Version
jira	lt	8.5.4
jira_data_center	ge	8.6.0
jira_data_center	lt	8.6.2
jira_data_center	ge	8.7.0
jira_data_center	lt	8.7.1
jira_server	ge	8.7.0
jira_server	lt	8.7.1
jira_server	ge	8.6.0
jira_server	lt	8.6.2
jira_software_data_center	lt	8.5.4

References

jira.atlassian.com/browse/JRASERVER-70814

0.001 Low

EPSS

Percentile

29.3%

JSON

Related for PRION:CVE-2020-14173