Security Advisory

CVE-2020-36288

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-04-14 23:45:17

Last updated 2024-10-17 14:02:56

Assigner atlassian

State PUBLISHED

Description

The issue navigation and search view in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before version 8.13.4, and from version 8.14.0 before version 8.15.1 allows remote attackers to inject arbitrary HTML or JavaScript via a DOM Cross-Site Scripting (XSS) vulnerability caused by parameter pollution.

← Browse all CVEs View on cve.org ↗