CVE-2019-20416

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the project configuration feature. The affected versions are before version 8.3.0.

PUBLISHED Reserved 2020-01-23 | Published 2020-06-30 | Updated 2024-09-17 | Assigner atlassian

Problem types

Cross-Site Scripting

Product status

References

jira.atlassian.com/browse/JRASERVER-70856

jira.atlassian.com/browse/JRASERVER-70856

cve.org (CVE-2019-20416)

nvd.nist.gov (CVE-2019-20416)

Download JSON