← Back to browse · API

CVE-2022-36801

Severity
MEDIUM
CVSS
6.1
EPSS
0.64863
Risk score
47.1
CISA KEV
No
PoC
No
Published
2022-08-10
Modified
2024-10-29
First seen
2026-08-07
Aliases
EUVD-2022-39501, GHSA-4P3F-V89G-M246
Products
Atlassian:Jira Data Center unspecified <8.20.8, Atlassian:Jira Server unspecified <8.20.8
Sources
euvd EUVD-2022-39501

Description

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting (RXSS) vulnerability in the TeamManagement.jspa endpoint. The affected versions are before version 8.20.8.

References