VYPR
← All advisories
Medium severity4.8NVD Advisory· Published Jul 13, 2020· Updated Jun 17, 2026

CVE-2019-20900

CVE-2019-20900

Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the Add Field module. The affected versions are before version 8.7.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Atlassian/Jira Data Center
    cpe:2.3:a:atlassian:jira_data_center:*:*:*:*:*:*:*:*
    Range: >=8.2.1,<8.7.0
  • Atlassian/Jira Server2 versions
    cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:atlassian:jira_server:*:*:*:*:*:*:*:*range: >=8.2.1,<8.7.0
    • (no CPE)range: unspecified
  • Atlassian/Jirallm-fuzzy
    Range: <8.7.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.