Uploaded image for project: 'Jira Data Center'
  1. Jira Data Center
  2. JRASERVER-33678

Reflected XSS in JIRA Admin Panel (Delete User)

    XMLWordPrintable

Details

    Description

      The 'name' param in jira-components/jira-webapp/src/main/webapp/secure/admin/user/views/deleteuserconfirm.jsp is not sanitised, enabling arbitrary html/script execution.
      A url to demonstrate this issue is: http://localhost:8080/secure/admin/user/DeleteUser!default.jspa?name=a"><script>alert(document.cookie);</script>&returnUrl=UserBrowser.jspa

      Attachments

        Issue Links

          duplicates

          Bug - A problem which impairs or prevents the functions of the product. JRASERVER-34160 Reflected XSS in JIRA Admin Panel (Delete User)

          • High - High priority issues
          • Closed
          is related to

          JSP-164558 Loading...

          mentioned in

          Page Loading...

          Activity

            People

              edalgliesh Eric Dalgliesh
              dbdca3d7c582 Gjoko Krstic
              Votes:
              0 Vote for this issue
              Watchers:
              12 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: