State out of severity and priority, which attribute is provided by Testers and which attribute is provided by product owner/Business Analyst.

It’s the job of QA(Tester) to assign the severity of the bug while creating
bug however if that bug needs to fix urgently or can be handled in upcoming  releases, this decision is taken by product owner/business analyst. The reason  behind this is, as a tester you need to verify and validate the application  however, if a bug is identified either during static or dynamic testing and how important is that bug to fix in given scenario is the call taken by the product  owner.