Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissions to inject arbitrary HTML or JavaScript via a Stored Cross-Site Scripting (SXSS) vulnerability in the /rest/jpo/1.0/hierarchyConfiguration endpoint. The affected versions are before version 8.20.3.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://jira.atlassian.com/browse/JRASERVER-73069 |
Configurations
No configuration.
Information
Published : 2022-02-28 01:15
Updated : 2022-02-28 13:38
NVD link : CVE-2021-43945
Mitre link : CVE-2021-43945
JSON object : View
Products Affected
No product.
CWE
No CWE.