Description

The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability via the name of a custom field.

Remediation

References

CVE-2021-39117

Related Vulnerabilities

WordPress Plugin WP-RecentComments 'page' Parameter Cross-Site Scripting (2.0.6)

WordPress Plugin Hide My WP Cross-Site Scripting (4.51.1)

WordPress Plugin Redirection Cross-Site Request Forgery (1.1.3)

WordPress Plugin YT-Audio:Audio Hosting From YouTube in WordPress 'v' Parameter Cross-Site Scripting (1.7)

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.27)

Severity

Medium

Classification

CVE-2021-39117 CWE-707

Tags

Missing Update Known Vulnerabilities