CVE-2020-15943

Name of the Vulnerable Software and Affected Versions Gantt-Chart for Jira versions prior to 5.5.4

Description An issue in the Gantt-Chart module allows authenticated attackers to read and write to the module configuration of other users due to a missing privilege check. This can also be used to deliver an XSS payload to other users' dashboards.

Recommendations For versions prior to 5.5.4, update to version 5.5.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the Gantt-Chart module to minimize the risk of exploitation.