CVE-2021-43945

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissions to inject arbitrary HTML or JavaScript via a Stored Cross-Site Scripting (SXSS) vulnerability in the /rest/jpo/1.0/hierarchyConfiguration endpoint. The affected versions are before version 8.20.3.

References

https://jira.atlassian.com/browse/JRASERVER-73069

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3