CVE-2021-39117: XSS
The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability via the name of a custom field.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Atlassian Jira Server and Data Centerto a version that resolves this vulnerability.Fixed in 8.18.0
Event History
Frequently Asked Questions
What is CVE-2021-39117?
CVE-2021-39117 is a Cross-Site Scripting (XSS) vulnerability in Atlassian Jira Server and Data Center before version 8.18.0.
How does CVE-2021-39117 affect Atlassian Jira?
CVE-2021-39117 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability by manipulating the name of a custom field.
What is the severity of CVE-2021-39117?
The severity of CVE-2021-39117 is medium with a CVSS score of 4.8.
How can I fix CVE-2021-39117?
To fix CVE-2021-39117, users should upgrade to Atlassian Jira Server and Data Center version 8.18.0 or later.
Where can I find more information about CVE-2021-39117?
More information about CVE-2021-39117 can be found at the following link: https://jira.atlassian.com/browse/JRASERVER-72597