CVE-2020-14164

CVE-2020-14164 affects Atlassian Jira Server/Data Center with a vulnerability in the WYSIWYG editor that allows remote attackers to inject arbitrary HTML/JavaScript by pasting code into the editor. Affected versions are Jira Server/Data Center before 8.8.2; fixed in 8.5.9, 8.8.2, and 8.9.0. Jira ...

XSS in WYSIWYG editor via pasted code - CVE-2020-14164

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the WYSIWYG editor. The affected versions are before 8.5.9, and from version 8.6.0 before 8.8.2. Affected versions: version...