Skip to content
OpenAdvisories
Medium · 6.1 CVE-2022-36801 EUVD-2022-39501GHSA-4p3f-v89g-m246

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Re…

Published Aug 10, 2022 · Updated Oct 29, 2024 · Assigned by atlassian

Vendor: Atlassian Product: Jira Data Center Product: Jira Server Category: Web / CMS

Description

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting (RXSS) vulnerability in the TeamManagement.jspa endpoint. The affected versions are before version 8.20.8.

Affected products

VendorProductAffectedFixed
Atlassian Jira Server unspecified – < 8.20.8 8.20.8
Atlassian Jira Data Center unspecified – < 8.20.8 8.20.8

References