CVE-2021-41310
01.11.2021, 23:15
Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the Associated Projects feature (/secure/admin/AssociatedProjectsForCustomField.jspa). The affected versions are before version 8.5.19, from version 8.6.0 before 8.13.11, and from version 8.14.0 before 8.19.1.
| Vendor | Product | Version |
|---|---|---|
| atlassian | jira_software_data_center | 𝑥 < 8.5.19 |
| atlassian | jira_software_data_center | 8.6.0 ≤ 𝑥 < 8.13.11 |
| atlassian | jira_software_data_center | 8.14.0 ≤ 𝑥 < 8.19.1 |
𝑥
= Vulnerable software versions