Atlassian Jira < 8.13.12 / 8.14.x < 8.20.2 / 8.21.0 XSS (JRASERVER-72939)

The version of Atlassian Jira installed on the remote host is prior to 8.13.12 / 8.14.x 8.20.2 / 8.21.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-72939 advisory. - Reflected XSS /secure/admin/ImporterFinishedPage.jspa via error message - CVE-2021-41304...

CVE-2021-41304

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the /secure/admin/ImporterFinishedPage.jspa error message. The affected versions are before version 8.13.12, and from...

CVE-2021-41304

CVE-2021-41304 affects Atlassian Jira Server/Data Center with a reflected XSS in the error message of /secure/admin/ImporterFinishedPage.jspa. Affected versions are &lt; 8.13.12 and 8.14.0 ≤