| Package | Affected versions | Patched versions |
|---|---|---|
| jira server | ≥ 7.7, < 7.13.6≥ 8.0.0, < 8.3.2 | 7.13.68.3.2 |
The wikirenderer component in Jira before version 7.13.6, and from version 8.0.0 before version 8.3.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in image attribute specification.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free