Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting (XSS) vulnerability in the /rest/collectors/1.0/template/custom endpoint. To exploit this issue, the attacker must trick a user into visiting a malicious website. The affected versions are before version 8.13.15, and from version 8.14.0 before 8.20.3.

According to its self-reported version number, the instance of Atlassian Jira hosted on the remote web server is prior to 8.13.15 or 8.14.x prior to 8.20.3. It is, therefore, affected by multiple vulnerabilities:

 - A template injection leading to remote code execution in the Email Templates feature allowing remote attackers with administrator permissions to execute arbitrary code.

 - A reflected Cross-Site Scripting (XSS) vulnerability in the /rest/collectors/1.0/template/custom endpoint allowing remote attackers to inject arbitrary HTML or JavaScript.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Atlassian Jira installed on the remote host is prior to < 8.13.15 / 8.14.x < 8.20.3 / 8.21.0. It is, therefore, affected by a vulnerability as referenced in the JRASERVER-73068 advisory.

  - Reflected XSS via /rest/collectors/1.0/template/custom - CVE-2021-43942 (CVE-2021-43942)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
113272	Atlassian Jira 8.14.x < 8.20.3 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
113271	Atlassian Jira < 8.13.15 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	high
162779	Atlassian Jira < 8.13.15 / 8.14.x < 8.20.3 / 8.21.0 XSS (JRASERVER-73068)	Nessus	CGI abuses : XSS	medium

Detections

Analytics

CVE-2021-43942

medium

Tenable Plugins

high

high

medium