Description
EditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14, and from version 8.6.0 before version 8.13.6, and from 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability.
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2013-2417 Vulnerability (CVE-2013-2417)
Atlassian Jira CVE-2019-11583 Vulnerability (CVE-2019-11583)
Oracle JRE CVE-2013-2419 Vulnerability (CVE-2013-2419)
Apache Tomcat directory host Appbase authentication bypass vulnerability
Django Resource Management Errors Vulnerability (CVE-2015-5964)