Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the project configuration feature. The affected versions are before version 8.3.0.

Remediation

References

CVE-2019-20416

Related Vulnerabilities

PHP Other Vulnerability (CVE-2002-0484)

MySQL Other Vulnerability (CVE-2001-1275)

Artifactory Incorrect Authorization Vulnerability (CVE-2021-45074)

Sqlite CVE-2021-20223 Vulnerability (CVE-2021-20223)

SharePoint Improper Input Validation Vulnerability (CVE-2019-1257)

Severity

Medium

Classification

CVE-2019-20416 CWE-707

Tags

Missing Update Known Vulnerabilities