XSS in the MigratePriorityScheme resource - CVE-2019-11584

2019-08-0904:09:02

security-metrics-bot

jira.atlassian.com

0.001 Low

EPSS

Percentile

44.9%

JSON

The MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the priority icon url of an issue priority.

CPENameOperatorVersion
jira server and data centerle7.13.3
jira server and data centerlt8.3.2
jira server and data centerlt7.13.13
jira server and data centerlt8.4.0
jira server and data centerle8.0.2

Name	Operator	Version
jira server and data center	le	7.13.3
jira server and data center	lt	8.3.2
jira server and data center	lt	7.13.13
jira server and data center	lt	8.4.0
jira server and data center	le	8.0.2

0.001 Low

EPSS

Percentile

44.9%

JSON

Related for ATLASSIAN:JRASERVER-69785