Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the project configuration feature. The affected versions are before version 8.3.0.

Remediation

References

CVE-2019-20416

Related Vulnerabilities

WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Multiple Security Bypass Vulnerabilities (8.0)

MySQL CVE-2020-14799 Vulnerability (CVE-2020-14799)

PHP version older than 5.2.5

WordPress Plugin WP Source Control Directory Traversal (3.0.0)

MySQL Divide By Zero Vulnerability (CVE-2019-16168)

Severity

Medium

Classification

CVE-2019-20416 CWE-707

Tags

Missing Update Known Vulnerabilities