Unrated severityNVD Advisory· Published Jul 1, 2020· Updated Sep 16, 2024
CVE-2020-4025
CVE-2020-4025
Description
The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a rdf content type.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2<8.5.5, >=8.6.0 <8.8.2, >=8.9.0 <8.9.1+ 1 more
- (no CPE)range: <8.5.5, >=8.6.0 <8.8.2, >=8.9.0 <8.9.1
- (no CPE)range: unspecified
Patches
Vulnerability mechanics
References
1- jira.atlassian.com/browse/JRASERVER-71114mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.