CVE-2020-14166

The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by uploading a html file.

CVSS v3.1

4.8 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

CVSS v2.0

3.5 LOWAV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

1.94% chance of exploitation in the next 30 days, 79th percentile

Published

2020-07-01

Updated

2024-09-16

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/49748

References

• CVE Record
• NVD entry

Related

• CVE-2020-14157
• CVE-2020-14179
• CVE-2020-14153
• CVE-2020-14181
• CVE-2020-14146
• CVE-2020-14195