CVE-2021-41310

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting XSS vulnerability in the Associated Projects feature /secure/admin/AssociatedProjectsForCustomField.jspa. The affected versions are before...

CVE-2021-41310

CVE-2021-41310 : Atlassian Jira Server/Data Center contains a stored XSS in the Associated Projects feature (/secure/admin/AssociatedProjectsForCustomField.jspa). Affected versions are before 8.5.19, from 8.6.0 before 8.13.11, and from 8.14.0 before 8.19.1. An anonymous remote attacker can inject...