Security Advisory

CVE-2018-20827

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-08-09 19:31:05
Last updated 2024-09-16 22:30:50
Assigner atlassian
State PUBLISHED

Description

The activity stream gadget in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the country parameter.