CVE-2021-39117

No fix known EPSS <1%

The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability via the name of a custom field.

Published 2021-08-30 · CVE record · OSV

Products: Atlassian Jira Server, Atlassian Jira Data Center