CVE-2020-14166

Description

The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by uploading a html file.

References

https://jira.atlassian.com/browse/JSDSERVER-6895

http://packetstormsecurity.com/files/162107/Atlassian-Jira-Service-Desk-4.9.1-Cross-Site-Scripting.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3