Vulnerability in Atlassian Jira
CVE-2019-14996
The FilterPickerPopup.jspa resource in Jira before version 7.13.7, and from version 8.0.0 before version 8.3.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the searchOwner…
EPSS: 0.003 (49.4th percentile) — read the EPSS interpretation.
Affected products
- Atlassian Jira — versions unspecified, 8.0.0, unspecified
References
- jira.atlassian.com/browse/JRASERVER-69790 (x_refsource_CONFIRM)