Lucene search
+L

6 matches found

Tenable Nessus
Tenable Nessus
•added 2023/03/08 12:00 a.m.•18 views

Atlassian Jira 8.14.0 < 8.17.0 Export HTML Report Cross-Site Scripting

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.13.12 or 8.14.x prior to 8.16.1. It is, therefore, affected by a vulnerability which permits remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripti...

5.4CVSS6AI score0.00599EPSS
SaveExploits0References2
OSV
OSV
•added 2021/07/20 4:15 a.m.•18 views

CVE-2021-26083

Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability...

5.4CVSS6.2AI score0.00599EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/20 12:00 a.m.•7 views

CVE-2021-26083: Improper Neutralization of Input During Web Page Generation

Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability...

5.4CVSS5.9AI score0.00599EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/07/20 12:00 a.m.•3 views

PT-2021-16950

Name of the Vulnerable Software and Affected Versions Atlassian Jira Server and Jira Data Center versions prior to 8.5.14 Atlassian Jira Server and Jira Data Center versions 8.6.0 through 8.13.6 Atlassian Jira Server and Jira Data Center versions 8.14.0 through 8.16.1 Description The issue allows...

5.4CVSS0.00599EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2021/07/15 12:00 a.m.•12 views

CVE-2021-26083

Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability...

5.4CVSS5.8AI score0.00599EPSS
SaveExploits0References2Affected Software2
Atlassian
Atlassian
•added 2021/03/15 12:53 a.m.•88 views

The name of a filter can be used to XSS users who open an "Export HTML Report" - CVE-2021-26083

Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in Export HTML Report feature. The affected versions are before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before...

5.4CVSS3.1AI score0.00599EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder