CVE-2019-8444: XSS
Published Aug 23, 2019
·Updated
The wikirenderer component in Jira before version 7.13.6, and from version 8.0.0 before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in image attribute specification.
Affected Software
2 affected components
Atlassian Jira Server>=7.7<7.13.6
Atlassian Jira Server>=8.0.0<8.3.2
Event History
Aug 23, 2019
CVE Published
via MITRE·01:49 PM
Data Sourced
via MITRE·01:49 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2019-8444?
CVE-2019-8444 has a medium severity rating due to its potential for exploitation via cross-site scripting.
2
How do I fix CVE-2019-8444?
To mitigate CVE-2019-8444, upgrade to Jira version 7.13.6 or version 8.3.2 and above.
3
What systems are affected by CVE-2019-8444?
CVE-2019-8444 affects Jira Server versions prior to 7.13.6 and versions between 8.0.0 and 8.3.2.
4
What type of attack does CVE-2019-8444 allow?
CVE-2019-8444 allows remote attackers to perform cross-site scripting (XSS) attacks.
5
Is user input at risk with CVE-2019-8444?
Yes, CVE-2019-8444 exposes user input fields to the risk of injection of arbitrary HTML or JavaScript.