CVE-2020-14166

The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by uploading a html file.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:data_center:*:*:*
cpe:2.3:a:atlassian:jira_service_desk:*:*:*:*:server:*:*:*

History

No history.

Information

Published : 2020-07-01 02:15

Updated : 2024-02-28 17:47


NVD link : CVE-2020-14166

Mitre link : CVE-2020-14166

CVE.ORG link : CVE-2020-14166


JSON object : View

Products Affected

atlassian

  • jira_service_desk
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')