Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-29402

Cross-Site Scripting Vulnerabilities

XMLWordPrintable

      NOTE: This bug report is for JIRA Server. Using JIRA Cloud? See the corresponding bug report.

      We have identified and fixed 9 cross-site scripting (XSS) vulnerabilities that affect JIRA instances, including publicly available instances (that is, Internet-facing servers). XSS vulnerabilities allow an attacker to embed their own JavaScript into a JIRA page.

      These vulnerabilities affect JIRA 4.2 and above, and have been fixed in JIRA 5.1.1.

      More information is available in the advisory at https://confluence.atlassian.com/display/JIRA/JIRA+Security+Advisory+2012-08-28

            vosipov VitalyA
            vosipov VitalyA
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

              Created:
              Updated:
              Resolved: