Cross site scripting

2020-06-0107:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

29.3%

JSON

Affected versions are: Before 8.5.5, and from 8.6.0 before 8.8.1 of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the XML export view.

CPENameOperatorVersion
jiralt7.13.16
jira_data_centerge8.0.0
jira_data_centerlt8.5.5
jira_data_centerge8.6.0
jira_data_centerlt8.8.1
jira_serverge8.0.0
jira_serverlt8.5.5
jira_serverge8.6.0
jira_serverlt8.8.1
jira_software_data_centerlt7.13.16

Name	Operator	Version
jira	lt	7.13.16
jira_data_center	ge	8.0.0
jira_data_center	lt	8.5.5
jira_data_center	ge	8.6.0
jira_data_center	lt	8.8.1
jira_server	ge	8.0.0
jira_server	lt	8.5.5
jira_server	ge	8.6.0
jira_server	lt	8.8.1
jira_software_data_center	lt	7.13.16

References

jira.atlassian.com/browse/JRASERVER-70923

0.001 Low

EPSS

Percentile

29.3%

JSON

Related for PRION:CVE-2020-4021