CVE-2021-43942

CVE-2021-43942: falha em Atlassian Jira Server

Publicada em · Atualizada em

15Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 55%
probabilidade de exploração
55%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting (XSS) vulnerability in the /rest/collectors/1.0/template/custom endpoint. To exploit this issue, the attacker must trick a user into visiting a malicious website. The affected versions are before version 8.13.15, and from version 8.14.0 before 8.20.3.
Produtos afetados
Atlassian · Jira Data CenterAtlassian · Jira Server
CVEs relacionadas — Atlassian Jira Server

No mesmo produto, das mais perigosas para as menos.

CVE-2021-26086MEDIUMCVE-2021-26086EPSS 100.0%KEVCVE-2020-14181—CVE-2020-14181EPSS 99.6%CVE-2020-36289MEDIUMCVE-2020-36289EPSS 99.2%CVE-2020-14179—CVE-2020-14179EPSS 76.0%CVE-2022-36801MEDIUMCVE-2022-36801EPSS 66.3%CVE-2020-36239CRITICALCVE-2020-36239EPSS 49.8%
Referências
https://jira.atlassian.com/browse/JRASERVER-73068