AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2021-43945

MEDIUM · CVSS 4.8 EPSS 0.57%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2022-02-28 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2021-43945
Severity
MEDIUM
CVSS
4.8
EPSS
0.57%
Java

Original NVD Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissions to inject arbitrary HTML or JavaScript via a Stored Cross-Site Scripting (SXSS) vulnerability in the /rest/jpo/1.0/hierarchyConfiguration endpoint. The affected versions are before version 8.20.3.