VULNERABILITY INTELLIGENCE

CVE-2020-4025

CVSS score4.8 MEDIUM
EPSS probability0.92%
CISA KEVNot currently listed
Published2020-07-01
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Description

The attachment download resource in Atlassian Jira Server and Data Center The attachment download resource in Atlassian Jira Server and Data Center before 8.5.5, and from 8.6.0 before 8.8.2, and from 8.9.0 before 8.9.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a rdf content type.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references