Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability issue attachments with a rdf content type.

Affected versions:

• version < 8.5.5
• 8.6.0 ≤ version < 8.8.2
• 8.9.0 ≤ version < 8.9.1

Fixed versions:

• 8.5.5
• 8.8.2
• 8.9.1
• 8.10.0