Skip to content
OpenAdvisories
Unscored CVE-2020-14184 EUVD-2020-6341GHSA-45c7-44wq-fm8v

Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) v…

Published Oct 12, 2020 · Updated Sep 17, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Jira Server Category: Web / CMS

Description

Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in Jira issue filter export files. The affected versions are before 8.5.9, from version 8.6.0 before 8.12.3, and from version 8.13.0 before 8.13.1.

Affected products

VendorProductAffectedFixed
Atlassian Jira Server unspecified – < 8.5.9, 8.6.0 – < unspecified, unspecified – < 8.12.3, 8.13.0 – < unspecified, unspecified – < 8.13.1 8.5.9

References