The XML Export in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a stored cross site scripting vulnerability.
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://jira.atlassian.com/browse/JRASERVER-72393 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: atlassian
Published: 2021-07-20T03:25:14.310371Z
Updated: 2024-09-16T18:23:40.272Z
Reserved: 2021-01-25T00:00:00
Link: CVE-2021-26082
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2021-07-20T04:15:10.940
Modified: 2022-03-30T13:29:49.920
Link: CVE-2021-26082
Redhat
No data.