medium5.4
CVE-2021-27222
In the "Time in Status" app before 4.13.0 for Jira, remote authenticated attackers can cause Stored XSS.
Impact
In the "Time in Status" app before 4.13.0 for Jira, remote authenticated attackers can cause Stored XSS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Obss | Time In Status | before 4.13.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://dev.obss.com.tr/confluence/display/MD/2021-02-25+Time+in+Status+for+Jira+Server+and+Data+Center+Security+Advisory
- https://dev.obss.com.tr/jira/browse/APDTIS-1097?src=confmacro
- https://marketplace.atlassian.com/apps/1211756/time-in-status/version-history
- https://dev.obss.com.tr/confluence/display/MD/2021-02-25+Time+in+Status+for+Jira+Server+and+Data+Center+Security+Advisory
- https://dev.obss.com.tr/jira/browse/APDTIS-1097?src=confmacro
- https://marketplace.atlassian.com/apps/1211756/time-in-status/version-history