← CVE Intelligence

CVE-2020-36234

Atlassian / Jira Server PUBLISHED

Description (CNA)

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the Screens Modal view. The affected versions are before version 8.5.11, from version 8.6.0 before 8.13.3, and from version 8.14.0 before 8.15.0.

Affected (CNA)

Vendor / productVersions
Atlassian / Jira Serveraffected unspecified before 8.5.11; affected 8.6.0 before unspecified; affected unspecified before 8.13.3; affected 8.14.0 before unspecified; affected unspecified before 8.15.0
Atlassian / Jira Data Centeraffected unspecified before 8.5.11; affected 8.6.0 before unspecified; affected unspecified before 8.13.3; affected 8.14.0 before unspecified; affected unspecified before 8.15.0

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.