CVE-2020-15944
Medium
Description
An issue was discovered in the Gantt-Chart module before 5.5.5 for Jira. Due to missing validation of user input, it is vulnerable to a persistent XSS attack. An attacker can embed the attack vectors in the dashboard of other users. To exploit this vulnerability, an attacker has to be authenticated.
SeverityMedium
CVSS5.4
Exploit probability—
ProductGantt-chart
PublishedAug 4, 2020
First seenAug 4, 2020
How to fix
Update
- gantt-chart_project gantt-chart5.5.5 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gantt-chart_project gantt-chart | v < 5.5.5 | 5.5.5 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.