CVE-2020-4022

The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability issue attachments with a mixed multipart...

CVE-2020-14169

The quick search component in Atlassian Jira Server and Data Center before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability...

CVE-2020-14169

The CVE-2020-14169 vulnerability affects Atlassian Jira Server and Data Center (pre-8.9.1) in the Navigation-Search (quick search) component. The issue is a cross-site scripting (XSS) flaw introduced by improper validation of user-supplied input, allowing remote attackers to inject arbitrary HTML...

CVE-2020-4022

CVE-2020-4022 affects Atlassian Jira Server and Data Center: the attachment download resource and issue attachments component allow remote attackers to inject arbitrary HTML or JavaScript via XSS when handling mixed multipart content types. Affected versions include Jira Server/Data Center before...

Atlassian JIRA Server and Data Center Cross-Site Request Forgery Vulnerability (CNVD-2021-17350)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

Atlassian JIRA Server and Data Center Cross-Site Scripting Vulnerability (CNVD-2021-17351)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

CVE-2019-20416

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the project configuration feature. The affected versions are before version 8.3.0...

CVE-2019-20415

Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery CSRF vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0...

Cross site scripting

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the project configuration feature. The affected versions are before version 8.3.0...

Cross site request forgery (csrf)

Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery CSRF vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0...

CVE-2019-20416

Summary of CVE-2019-20416 ( Atlassian Jira Server/Data Center ) : The issue is a cross‑site scripting (XSS) vulnerability in the project configuration feature. Affected are Jira Server/Data Center instances running versions prior to 8.3.0. Root cause is improper validation/escaping of user-suppli...

CVE-2019-20416

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the project configuration feature. The affected versions are before version 8.3.0...

CVE-2019-20415

Summary of CVE-2019-20415 (Atlassian Jira Server/Data Center) : A cross-site request forgery (CSRF) vulnerability in the logging and profiling feature allows remote attackers to modify logging and configuration settings. Affected versions : Jira Server/Data Center before 7.13.3, and 8.0.0 before ...

CVE-2019-20415

Atlassian Jira Server and Data Center in affected versions allows remote attackers to modify logging and profiling settings via a cross-site request forgery CSRF vulnerability. The affected versions are before version 7.13.3, and from version 8.0.0 before 8.1.0...

Atlassian JIRA Server and Data Center Cross-Site Request Forgery Vulnerability (CNVD-2021-17353)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

Atlassian JIRA Server and Data Center Authorization Issues Vulnerability (CNVD-2021-17354)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

Atlassian JIRA Server and Data Center Input Validation Error Vulnerability

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

Atlassian JIRA Server and Data Center Information Disclosure Vulnerability (CNVD-2021-17352)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

Atlassian JIRA Server and Data Center Cross-Site Scripting Vulnerability (CNVD-2021-17356)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia.Atlassian JIRA Server is the server version of a defect tracking management system. Atlassian JIRA Server is the server version of a defect tracking management system that is used to track and manage all...

Upgrade Tomcat to version 9.0.37

h3. Issue Summary The current version of Tomcat 9.0.33 bundled with Confluence at least up to Confluence version 7.6 is vulnerable to HTTP/2 Denial of Service CVE-2020-11996 https://tomcat.apache.org/security-8.htmlFixedinApacheTomcat9.0.36...