Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the project configuration feature. The affected versions are before version 8.3.0.

Remediation

References

CVE-2019-20416

Related Vulnerabilities

WordPress Plugin Asgaros Forum Cross-Site Request Forgery (1.5.8)

WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Cross-Site Scripting (1.3.3)

Oracle JRE CVE-2013-0445 Vulnerability (CVE-2013-0445)

Magento Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-7851)

PostgreSQL Numeric Errors Vulnerability (CVE-2010-0442)

Severity

Medium

Classification

CVE-2019-20416 CWE-707

Tags

Missing Update Known Vulnerabilities