Skip to content
OpenAdvisories
Unscored CVE-2021-39117 EUVD-2021-25553GHSA-94j7-qfrq-rx57

The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject arbitrary…

Published Aug 30, 2021 · Updated Oct 11, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Jira Data Center Product: Jira Server Category: Web / CMS

Description

The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability via the name of a custom field.

Affected products

VendorProductAffectedFixed
Atlassian Jira Server unspecified – < 8.18.0 8.18.0
Atlassian Jira Data Center unspecified – < 8.18.0 8.18.0

References