Atlassian Jira Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2020-14184 - Vulnerability Database

Atlassian Jira Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2020-14184

Medium

Reference: CVE-2020-14184

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-14184

Title: Atlassian Jira Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Affected versions of Atlassian Jira Server allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in Jira issue filter export files. The affected versions are before 8.5.9 from version 8.6.0 before 8.12.3 and from version 8.13.0 before 8.13.1.