CVE-2021-26079: XSS
The CardLayoutConfigTable component in Jira Server and Jira Data Center before version 8.5.15, and from version 8.6.0 before version 8.13.7, and from version 8.14.0 before 8.17.0 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-26079?
CVE-2021-26079 is a cross site scripting (XSS) vulnerability in the CardLayoutConfigTable component of Jira Server and Jira Data Center.
How can remote attackers exploit CVE-2021-26079?
Remote attackers can inject arbitrary HTML or JavaScript via the affected CardLayoutConfigTable component, allowing for cross site scripting (XSS) attacks.
Which versions of Jira are affected by CVE-2021-26079?
Jira Server and Jira Data Center versions before 8.5.15, between 8.6.0 and 8.13.7, and between 8.14.0 and 8.17.0 are affected by CVE-2021-26079.
What is the severity of CVE-2021-26079?
CVE-2021-26079 has a severity value of 6.1, which is classified as medium.
How can I fix CVE-2021-26079?
To fix CVE-2021-26079, it is recommended to upgrade Jira Server or Jira Data Center to version 8.5.15, 8.13.7, or 8.17.0, depending on the affected version.