Skip to content
OpenAdvisories
Unscored CVE-2021-26080 EUVD-2021-12901GHSA-hccg-5m3q-4vwv

EditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14, and from version 8.6.0 before version 8.13.6, and from 8…

Published Jun 7, 2021 · Updated Oct 17, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Jira Data Center Product: Jira Server Category: Web / CMS

Description

EditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14, and from version 8.6.0 before version 8.13.6, and from 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability.

Affected products

VendorProductAffectedFixed
Atlassian Jira Server unspecified – < 8.5.14, 8.6.0 – < unspecified, unspecified – < 8.13.6, 8.14.0 – < unspecified, unspecified – < 8.16.1 8.5.14
Atlassian Jira Data Center unspecified – < 8.5.14, 8.6.0 – < unspecified, unspecified – < 8.13.6, 8.14.0 – < unspecified, unspecified – < 8.16.1 8.5.14

References