Loading...

XML

Word

Printable

Details

Type: Bug
Resolution: Fixed
Priority: High
Fix Version/s: 4.0 Iteration 45, 4.0 Milestone 7, 4.0
Affects Version/s: 4.0 - Beta 2
Component/s: Dashboard & Gadgets
Labels:
- affects-server
- security

Introduced in Version:
4
Bug Fix Policy:
View Atlassian Server bug fix policy

Description

When unfavouriting a dashboard with name '<script>alert('blah');</script>' the javascript is executed.

https://extranet.atlassian.com/display/QA/JIRA+Dashboards+Blitz+-+Mark%27s+Findings

Attachments

Activity

People

Assignee:: Andreas Knecht (Inactive)

Reporter:: Andreas Knecht (Inactive)

Votes:: 0 Vote for this issue

Watchers:: 0 Start watching this issue

Dates

Created:: 12/Aug/2009 4:55 AM

Updated:: 27/Mar/2019 11:55 PM

Resolved:: 12/Aug/2009 4:55 AM