CVE-2019-20416: Atlassian Jira

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the project configuration feature. The affected versions are before version 8.3.0.

Affected products

• Atlassian Jira: before 8.3.0 (fixed in 8.3.0)
• Atlassian Jira Software Data Center: before 8.3.0 (fixed in 8.3.0)

Published 2020-06-30. Last modified 2026-06-17.