CVE-2019-8450: XSS
Various templates of the Optimization plugin in Jira before version 7.13.6, and from version 8.0.0 before version 8.4.0 allow remote attackers who have permission to manage custom fields to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of a custom field.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-8450?
CVE-2019-8450 has been classified as a medium severity vulnerability due to its potential for exploitation via XSS.
How do I fix CVE-2019-8450?
To fix CVE-2019-8450, upgrade your Jira installation to version 7.13.6 or to version 8.4.0 or later.
What type of attack does CVE-2019-8450 allow?
CVE-2019-8450 allows remote attackers to execute arbitrary HTML or JavaScript code through an XSS vulnerability.
Who is affected by CVE-2019-8450?
CVE-2019-8450 affects Jira versions prior to 7.13.6 and from 8.0.0 to prior to 8.4.0, specifically those templates of the Optimization plugin.
Can CVE-2019-8450 be exploited by regular users?
No, CVE-2019-8450 can only be exploited by remote attackers who have permission to manage custom fields.