Skip to content
OpenAdvisories
Unscored CVE-2019-20416 EUVD-2019-10965GHSA-wrhc-7rh5-4x28

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site s…

Published Jun 30, 2020 · Updated Sep 17, 2024 · Assigned by atlassian

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the project configuration feature. The affected versions are before version 8.3.0.

Affected products

VendorProductAffectedFixed
Atlassian Jira Server unspecified – < 8.3.0 8.3.0

References