Description

The quick search component in Atlassian Jira Server and Data Center before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability

Remediation

References

CVE-2020-14169

Related Vulnerabilities

WordPress Plugin WP-RecentComments 'page' Parameter Cross-Site Scripting (2.0.6)

PHP Improper Input Validation Vulnerability (CVE-2013-4636)

MySQL CVE-2019-2495 Vulnerability (CVE-2019-2495)

Microsoft SQL Server Permissions, Privileges, and Access Controls Vulnerability (CVE-2003-0230)

MySQL Improper Neutralization of Special Elements used in a Command ('Command Injection') Vulnerability (CVE-2010-2008)

Severity

Medium

Classification

CVE-2020-14169 CWE-707

Tags

Missing Update Known Vulnerabilities