Description

The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by uploading a html file.

Remediation

References

CVE-2020-14166

Related Vulnerabilities

WordPress Plugin User Role by BestWebSoft Cross-Site Scripting (1.4.1)

Joomla! Core Security Bypass (1.6.0 - 3.6.5)

Apache Tomcat CVE-2023-34981 Vulnerability (CVE-2023-34981)

WordPress 6.0.x Cross-Site Scripting (6.0 - 6.0.7)

OpenSSL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-8176)

Severity

Medium

Classification

CVE-2020-14166 CWE-707 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities