CVE-2020-14166

The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator…

published July 1, 2020

CVSS
—
EPSS
2%
Percentile
80.0
In the wild
Unconfirmed
What it is

The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by uploading a html file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01940 · 80.0th percentile
Published
2020-07-01T01:35Z
EPSS history
Timeline
  • 01 JUL 01:35Z
    The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator…
    cvelistv5