CVE:CVE-2021-41304
CNNVD:CNNVD-202110-1814
Atlassian Jira是澳大利亚Atlassian公司的一套缺陷跟踪管理系统。该系统主要用于对工作中各类问题、缺陷进行跟踪管理。
Atlassian Jira Server and Data Center存在跨站脚本漏洞，该漏洞源于允许匿名远程攻击者通过 /secure/admin/ImporterFinishedPage.jspa 错误消息中的跨站点脚本 (XSS) 漏洞注入任意 HTML 或 JavaScript。
solution:Upgrade atlassian data_center to a higher version than 8.13.12,and avoid the version (,8.13.12); Upgrade atlassian jira to a higher version than 8.13.12,and avoid the version (,8.13.12); Upgrade atlassian jira_data_center to a higher version than 8.20.2,and avoid the version [8.14.0,8.20.2); Upgrade atlassian jira_server to a higher version than 8.20.2,and avoid the version [8.14.0,8.20.2)