CVE-2021-39117

Published: 2021-08-30T07:15Z

Last Modified: 2024-11-21T06:18Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability via the name of a custom field. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt