CVE-2019-11584 — Cross-site Scripting in Atlassian Jira

CWE-79 — Cross-site Scripting3 documents3 sources
Severity
6.1MEDIUMNVD
EPSS
0.2%
top 54.00%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Atlassian Jira
Timeline
PublishedAug 23
Latest updateMay 24

Description

The MigratePriorityScheme resource in Jira before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the priority icon url of an issue priority.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NExploitability: 2.8 | Impact: 2.7

Affected Packages2 packages

▶CVEListV5atlassian/jiraunspecified — 8.3.2
▶NVDatlassian/jira< 8.3.2

🔴Vulnerability Details

2
GHSA
GHSA-8r3m-p3xg-5qjq: The MigratePriorityScheme resource in Jira before version 8↗2022-05-24
▶
CVEList
CVE-2019-11584: The MigratePriorityScheme resource in Jira before version 8↗2019-08-23
▶
CVE-2019-11584 — Cross-site Scripting in Atlassian Jira | cvebase